CVE-2016-9447

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-11-14T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-01-06T16:15:27.000Z", "orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "microfocus"}, "references": [{"name": "[oss-security] 20161118 Re: CVE Request: gstreamer plugins", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2016/11/18/13"}, {"name": "RHSA-2017:0018", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://rhn.redhat.com/errata/RHSA-2017-0018.html"}, {"name": "[oss-security] 20161118 CVE Request: gstreamer plugins", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2016/11/18/12"}, {"tags": ["x_refsource_MISC"], "url": "http://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-compromising-linux-desktop.html"}, {"name": "94427", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/94427"}, {"name": "RHSA-2016:2974", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://rhn.redhat.com/errata/RHSA-2016-2974.html"}, {"name": "GLSA-201705-10", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "https://security.gentoo.org/glsa/201705-10"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@microfocus.com", "ID": "CVE-2016-9447", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "[oss-security] 20161118 Re: CVE Request: gstreamer plugins", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2016/11/18/13"}, {"name": "RHSA-2017:0018", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2017-0018.html"}, {"name": "[oss-security] 20161118 CVE Request: gstreamer plugins", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2016/11/18/12"}, {"name": "http://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-compromising-linux-desktop.html", "refsource": "MISC", "url": "http://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-compromising-linux-desktop.html"}, {"name": "94427", "refsource": "BID", "url": "http://www.securityfocus.com/bid/94427"}, {"name": "RHSA-2016:2974", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2016-2974.html"}, {"name": "GLSA-201705-10", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201705-10"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T02:50:38.384Z"}, "title": "CVE Program Container", "references": [{"name": "[oss-security] 20161118 Re: CVE Request: gstreamer plugins", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2016/11/18/13"}, {"name": "RHSA-2017:0018", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://rhn.redhat.com/errata/RHSA-2017-0018.html"}, {"name": "[oss-security] 20161118 CVE Request: gstreamer plugins", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2016/11/18/12"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-compromising-linux-desktop.html"}, {"name": "94427", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/94427"}, {"name": "RHSA-2016:2974", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://rhn.redhat.com/errata/RHSA-2016-2974.html"}, {"name": "GLSA-201705-10", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "https://security.gentoo.org/glsa/201705-10"}]}]}, "cveMetadata": {"assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "assignerShortName": "microfocus", "cveId": "CVE-2016-9447", "datePublished": "2017-01-23T21:00:00.000Z", "dateReserved": "2016-11-18T00:00:00.000Z", "dateUpdated": "2024-08-06T02:50:38.384Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "security@opentext.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "2CABCEA7-47FE-4B3B-9556-FB8CDEAD4CDE", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.1:*:*:*:*:*:*:*", "matchCriteriaId": "D4ABB6BA-BC7C-4DEF-8D56-7101EB5F9745", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.2:*:*:*:*:*:*:*", "matchCriteriaId": "FA03BFEE-ED65-483F-AF60-FCF0B85F6D64", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.3:*:*:*:*:*:*:*", "matchCriteriaId": "82EFDF82-DD6F-4825-82D6-3409B000403D", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.4:*:*:*:*:*:*:*", "matchCriteriaId": "8D81E127-8840-4757-806C-A19DC2C918FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.5:*:*:*:*:*:*:*", "matchCriteriaId": "BF2BBF67-A54C-47C4-B81A-67150A159959", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.6:*:*:*:*:*:*:*", "matchCriteriaId": "FE6FFD5F-3EA4-43EF-9CED-BEF6146D5FFE", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.7:*:*:*:*:*:*:*", "matchCriteriaId": "35DFA5A9-9E3B-453D-89F8-EF9F7CBF1A1E", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.8:*:*:*:*:*:*:*", "matchCriteriaId": "7B26F0FF-2C0A-42B6-8B2C-FE5899F2EDFB", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.9:*:*:*:*:*:*:*", "matchCriteriaId": "AD083B38-280D-4770-B7F1-335F9A042C69", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.10:*:*:*:*:*:*:*", "matchCriteriaId": "68D24C7D-CA97-4E5A-B8EB-FA0975935A42", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.11:*:*:*:*:*:*:*", "matchCriteriaId": "CB0FE9A8-D355-43C6-AA58-07E4146765F4", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.12:*:*:*:*:*:*:*", "matchCriteriaId": "44D1AE29-B8BB-4B30-BAE9-621559489B5E", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.13:*:*:*:*:*:*:*", "matchCriteriaId": "19AAEDF0-7DCF-4875-8353-9A9B22AAA741", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.14:*:*:*:*:*:*:*", "matchCriteriaId": "B7C4B27F-533D-4F8F-8EE7-746E83C283EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.15:*:*:*:*:*:*:*", "matchCriteriaId": "2D669FB3-F688-4D6C-A4AD-C30A527406A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.16:*:*:*:*:*:*:*", "matchCriteriaId": "CE725461-3814-4105-8D18-50DA70692816", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.17:*:*:*:*:*:*:*", "matchCriteriaId": "3251ADA9-8701-466B-8270-4467E87CFDBC", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.18:*:*:*:*:*:*:*", "matchCriteriaId": "6457BE57-BBC8-4C7A-A30E-13C8822DFE0F", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.19:*:*:*:*:*:*:*", "matchCriteriaId": "3F9B7A97-AAEF-4ECA-A286-C54D56B26E45", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.20:*:*:*:*:*:*:*", "matchCriteriaId": "60548FE0-E0ED-40D1-9DC3-629201DAE5BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.21:*:*:*:*:*:*:*", "matchCriteriaId": "F29CA4B6-A26C-4DFE-9B18-8BF36D6F1012", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.22:*:*:*:*:*:*:*", "matchCriteriaId": "3FA04B72-5AA3-4114-B793-47A5D9251E49", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.23:*:*:*:*:*:*:*", "matchCriteriaId": "956FBAF1-AD38-40D5-A355-19C7673243AD", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.24:*:*:*:*:*:*:*", "matchCriteriaId": "5A822F28-63D0-409C-A7EB-0E292A59F1DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.25:*:*:*:*:*:*:*", "matchCriteriaId": "58A4B74D-1B65-4868-A34F-16F4AFEB0753", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.26:*:*:*:*:*:*:*", "matchCriteriaId": "7F6D776B-B8E7-407A-83B9-EFFC127B9F23", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.27:*:*:*:*:*:*:*", "matchCriteriaId": "6A9A15C0-AAD1-41B3-93B4-54CC020D0144", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.28:*:*:*:*:*:*:*", "matchCriteriaId": "79CA003D-1101-4C2C-8974-7DA03027A4A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.29:*:*:*:*:*:*:*", "matchCriteriaId": "67635C9C-681C-44B4-A64E-25DB0B585AD7", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.30:*:*:*:*:*:*:*", "matchCriteriaId": "7252F2D8-134C-48C5-AABF-3737F7536D5B", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.31:*:*:*:*:*:*:*", "matchCriteriaId": "E190525E-4FBC-4C95-895C-F829FFF49992", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.32:*:*:*:*:*:*:*", "matchCriteriaId": "7A218BF5-C156-4ED0-8936-DC701373BFB2", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.33:*:*:*:*:*:*:*", "matchCriteriaId": "9A4232D3-F26F-4598-AA10-71ACD5B47950", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.34:*:*:*:*:*:*:*", "matchCriteriaId": "57BC904F-54E5-4097-8166-A2FE7C9E3854", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.35:*:*:*:*:*:*:*", "matchCriteriaId": "3C26CA87-2EFC-4F5B-8DF6-1B5F33869448", "vulnerable": true}, {"criteria": "cpe:2.3:a:gstreamer:gstreamer:0.10.36:*:*:*:*:*:*:*", "matchCriteriaId": "61495A4D-3D75-4C26-8C08-49CC35179E0A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file."}, {"lang": "es", "value": "Los mapeos ROM en el decodificador NSF en gstreamer 0.10.x permiten a atacantes remotos provocar una denegaci\u00f3n de servicio (lectura o escritura fuera de l\u00edmites) y posiblemente ejecutar c\u00f3digo arbitrario a trav\u00e9s de un archivo de m\u00fasica NSF manipulado."}], "id": "CVE-2016-9447", "lastModified": "2026-06-17T00:56:05.273", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-01-23T21:59:03.127", "references": [{"source": "security@opentext.com", "url": "http://rhn.redhat.com/errata/RHSA-2016-2974.html"}, {"source": "security@opentext.com", "url": "http://rhn.redhat.com/errata/RHSA-2017-0018.html"}, {"source": "security@opentext.com", "url": "http://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-compromising-linux-desktop.html"}, {"source": "security@opentext.com", "url": "http://www.openwall.com/lists/oss-security/2016/11/18/12"}, {"source": "security@opentext.com", "url": "http://www.openwall.com/lists/oss-security/2016/11/18/13"}, {"source": "security@opentext.com", "url": "http://www.securityfocus.com/bid/94427"}, {"source": "security@opentext.com", "url": "https://security.gentoo.org/glsa/201705-10"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://rhn.redhat.com/errata/RHSA-2016-2974.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://rhn.redhat.com/errata/RHSA-2017-0018.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-compromising-linux-desktop.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2016/11/18/12"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2016/11/18/13"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/94427"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.gentoo.org/glsa/201705-10"}], "sourceIdentifier": "security@opentext.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}, {"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2016:2974", "cpe": "cpe:/o:redhat:enterprise_linux:6", "package": "gstreamer-plugins-bad-free-0:0.10.19-5.el6_8", "product_name": "Red Hat Enterprise Linux 6", "release_date": "2016-12-21T00:00:00Z"}, {"advisory": "RHSA-2017:0018", "cpe": "cpe:/o:redhat:enterprise_linux:7", "impact": "moderate", "package": "gstreamer-plugins-bad-free-0:0.10.23-22.el7_3", "product_name": "Red Hat Enterprise Linux 7", "release_date": "2017-01-05T00:00:00Z"}], "bugzilla": {"description": "gstreamer-plugins-bad-free: Memory corruption flaw in NSF decoder", "id": "1395126", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1395126"}, "csaw": false, "cvss": {"cvss_base_score": "6.8", "cvss_scoring_vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "status": "verified"}, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "status": "verified"}, "cwe": "CWE-125", "details": ["The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file.", "A memory corruption flaw was found in GStreamer's Nintendo NSF music file format decoding plug-in. A remote attacker could use this flaw to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the user running the application."], "mitigation": {"lang": "en:us", "value": "sudo rm /usr/lib*/gstreamer-0.10/libgstnsf.so\nPlease note that this mitigation deletes the vulnerable NSF codec file, which removes the functionality to play Nintendo NSF music files."}, "name": "CVE-2016-9447", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Not affected", "impact": "moderate", "package_name": "gstreamer", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "impact": "moderate", "package_name": "gstreamer", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "impact": "moderate", "package_name": "gstreamer", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "impact": "moderate", "package_name": "gstreamer1", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "impact": "moderate", "package_name": "gstreamer1-plugins-bad-free", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/a:redhat:enterprise_linux:7::hypervisor", "fix_state": "Will not fix", "impact": "moderate", "package_name": "mingw-virt-viewer", "product_name": "Red Hat Enterprise Virtualization 3"}], "public_date": "2016-11-14T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2016-9447\nhttps://nvd.nist.gov/vuln/detail/CVE-2016-9447\nhttps://scarybeastsecurity.blogspot.cz/2016/11/0day-exploit-compromising-linux-desktop.html"], "threat_severity": "Important"}

{}