7.8

CVE-2016-9447

The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gstreamer Project ≫ Gstreamer Version0.10.0
Gstreamer Project ≫ Gstreamer Version0.10.1
Gstreamer Project ≫ Gstreamer Version0.10.2
Gstreamer Project ≫ Gstreamer Version0.10.3
Gstreamer Project ≫ Gstreamer Version0.10.4
Gstreamer Project ≫ Gstreamer Version0.10.5
Gstreamer Project ≫ Gstreamer Version0.10.6
Gstreamer Project ≫ Gstreamer Version0.10.7
Gstreamer Project ≫ Gstreamer Version0.10.8
Gstreamer Project ≫ Gstreamer Version0.10.9
Gstreamer Project ≫ Gstreamer Version0.10.10
Gstreamer Project ≫ Gstreamer Version0.10.11
Gstreamer Project ≫ Gstreamer Version0.10.12
Gstreamer Project ≫ Gstreamer Version0.10.13
Gstreamer Project ≫ Gstreamer Version0.10.14
Gstreamer Project ≫ Gstreamer Version0.10.15
Gstreamer Project ≫ Gstreamer Version0.10.16
Gstreamer Project ≫ Gstreamer Version0.10.17
Gstreamer Project ≫ Gstreamer Version0.10.18
Gstreamer Project ≫ Gstreamer Version0.10.19
Gstreamer Project ≫ Gstreamer Version0.10.20
Gstreamer Project ≫ Gstreamer Version0.10.21
Gstreamer Project ≫ Gstreamer Version0.10.22
Gstreamer Project ≫ Gstreamer Version0.10.23
Gstreamer Project ≫ Gstreamer Version0.10.24
Gstreamer Project ≫ Gstreamer Version0.10.25
Gstreamer Project ≫ Gstreamer Version0.10.26
Gstreamer Project ≫ Gstreamer Version0.10.27
Gstreamer Project ≫ Gstreamer Version0.10.28
Gstreamer Project ≫ Gstreamer Version0.10.29
Gstreamer Project ≫ Gstreamer Version0.10.30
Gstreamer Project ≫ Gstreamer Version0.10.31
Gstreamer Project ≫ Gstreamer Version0.10.32
Gstreamer Project ≫ Gstreamer Version0.10.33
Gstreamer Project ≫ Gstreamer Version0.10.34
Gstreamer Project ≫ Gstreamer Version0.10.35
Gstreamer Project ≫ Gstreamer Version0.10.36
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.624
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.