CVE-2016-9447

Published: Jan 23, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file.

Affected (37)

Products: Gstreamer: Gstreamer

Gstreamer

1 product

Gstreamer

Configuration A

37 vulnerable

Vulnerable Software	Affected Versions
Gstreamer Gstreamer	Version 0.10.0
Gstreamer Gstreamer	Version 0.10.10
Gstreamer Gstreamer	Version 0.10.11
Gstreamer Gstreamer	Version 0.10.12
Gstreamer Gstreamer	Version 0.10.13
Gstreamer Gstreamer	Version 0.10.14
Gstreamer Gstreamer	Version 0.10.15
Gstreamer Gstreamer	Version 0.10.16
Gstreamer Gstreamer	Version 0.10.17
Gstreamer Gstreamer	Version 0.10.18
Gstreamer Gstreamer	Version 0.10.19
Gstreamer Gstreamer	Version 0.10.1
Gstreamer Gstreamer	Version 0.10.20
Gstreamer Gstreamer	Version 0.10.21
Gstreamer Gstreamer	Version 0.10.22
Gstreamer Gstreamer	Version 0.10.23
Gstreamer Gstreamer	Version 0.10.24
Gstreamer Gstreamer	Version 0.10.25
Gstreamer Gstreamer	Version 0.10.26
Gstreamer Gstreamer	Version 0.10.27
Gstreamer Gstreamer	Version 0.10.28
Gstreamer Gstreamer	Version 0.10.29
Gstreamer Gstreamer	Version 0.10.2
Gstreamer Gstreamer	Version 0.10.30
Gstreamer Gstreamer	Version 0.10.31
Gstreamer Gstreamer	Version 0.10.32
Gstreamer Gstreamer	Version 0.10.33
Gstreamer Gstreamer	Version 0.10.34
Gstreamer Gstreamer	Version 0.10.35
Gstreamer Gstreamer	Version 0.10.36
Gstreamer Gstreamer	Version 0.10.3
Gstreamer Gstreamer	Version 0.10.4
Gstreamer Gstreamer	Version 0.10.5
Gstreamer Gstreamer	Version 0.10.6
Gstreamer Gstreamer	Version 0.10.7
Gstreamer Gstreamer	Version 0.10.8
Gstreamer Gstreamer	Version 0.10.9