| Name | CVE-2016-9447 |
| Description | The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DLA-712-1, DSA-3713-1 |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| gst-plugins-bad0.10 | source | wheezy | 0.10.23-7.1+deb7u3 | DLA-712-1 | ||
| gst-plugins-bad0.10 | source | jessie | 0.10.23-7.4+deb8u1 | DSA-3713-1 | ||
| gst-plugins-bad0.10 | source | (unstable) | (unfixed) |
http://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-compromising-linux-desktop.html