CVE-2017-5839

The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion…

published February 9, 2017

CVSS
—
EPSS
4%
Percentile
91.4
In the wild
Unconfirmed
What it is

The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vectors involving nested WAVEFORMATEX.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04480 · 91.4th percentile
Published
2017-02-09T15:00Z
EPSS history
Timeline
  • 09 FEB 15:00Z
    The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion…
    cvelistv5