CVE-2017-5843

Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in…

published February 9, 2017

CVSS
—
EPSS
4%
Percentile
89.9
In the wild
Unconfirmed
What it is

Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service (crash) via vectors involving stream tags, as demonstrated by 02785736.mxf.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03804 · 89.9th percentile
Published
2017-02-09T15:00Z
EPSS history
Timeline
  • 09 FEB 15:00Z
    Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in…
    cvelistv5