rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-9375 
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dtn.c by checking whether SDNV evaluation was successful.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-17T05:48:00.000Z
CVE-2016-9376 
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflow_v5.c by ensuring that certain length values were sufficiently large.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-17T05:48:00.000Z
CVE-2016-9377 
Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging IDT entry miscalculation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-22T16:00:00.000Z
CVE-2016-9378 
Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging an incorrect choice for software interrupt delivery.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-22T16:00:00.000Z
CVE-2016-9379 
The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2016-9380 
The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2016-9381 
Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2016-9382 
Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service (guest OS crash) by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2016-9383 
Xen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary memory and consequently obtain sensitive information, cause a denial of service (host crash), or execute arbitrary code on the host by leveraging broken emulation of bit test instructions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2016-9384 
Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-22T16:00:00.000Z
CVE-2016-9385 
The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial of service (host crash) by leveraging lack of canonical address checks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2016-9386 
The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2016-9387 
Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T18:00:00.000Z
CVE-2016-9388 
The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T18:00:00.000Z
CVE-2016-9389 
The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T18:00:00.000Z
CVE-2016-9390 
The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T18:00:00.000Z
CVE-2016-9391 
The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T18:00:00.000Z
CVE-2016-9392 
The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T18:00:00.000Z
CVE-2016-9393 
The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T18:00:00.000Z
CVE-2016-9394 
The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T18:00:00.000Z
CVE-2016-9395 
The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T18:00:00.000Z
CVE-2016-9396 
The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T18:00:00.000Z
CVE-2016-9397 
The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T18:00:00.000Z
CVE-2016-9398 
The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T18:00:00.000Z
CVE-2016-9399 
The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T18:00:00.000Z
CVE-2016-9400 
The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-22T16:00:00.000Z
CVE-2016-9401 
popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2016-9402 
SQL injection vulnerability in the moderation tool in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9403 
newreply.php in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to have unspecified impact by leveraging a missing permission check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9404 
Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors related to login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9405 
Cross-site scripting (XSS) vulnerability in member validation in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9406 
Cross-site scripting (XSS) vulnerability in the User control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9407 
Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving Mod control panel logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9408 
Cross-site scripting (XSS) vulnerability in the Mod control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving editing users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9409 
Cross-site scripting (XSS) vulnerability in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving pruning logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9410 
MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to obtain sensitive database information via vectors involving templates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9411 
The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to obtain the installation path via vectors involving sending mails.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9412 
MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow attackers to have unspecified impact via vectors related to low adminsid and sid entropy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9413 
The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9414 
MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow remote attackers to obtain sensitive information by leveraging missing directory listing protection in upload directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9415 
MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows allow remote attackers to overwrite arbitrary CSS files via vectors related to "style import."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9416 
SQL injection vulnerability in the users data handler in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9417 
The fetch_remote_file function in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to conduct server-side request forgery (SSRF) attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9418 
MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive information from ACP backups via vectors involving a short name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9419 
Cross-site scripting (XSS) vulnerability in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9420 
MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allow remote attackers to have unspecified impact via vectors related to "loose comparison false positives."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9421 
Cross-site scripting (XSS) vulnerability in the Users module in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T22:00:00.000Z
CVE-2016-9422 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. The feed_table_tag function in w3m doesn't properly validate the value of table span, which allows remote attackers to cause a denial of service (stack and/or heap buffer overflow) and possibly execute arbitrary code via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9423 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9424 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m doesn't properly validate the value of tag attribute, which allows remote attackers to cause a denial of service (heap buffer overflow crash) and possibly execute arbitrary code via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9425 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9426 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Integer overflow vulnerability in the renderTable function in w3m allows remote attackers to cause a denial of service (OOM) and possibly execute arbitrary code due to bdwgc's bug (CVE-2016-9427) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9427 
Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly execute arbitrary code via huge allocation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9428 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9429 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Buffer overflow in the formUpdateBuffer function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9430 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9431 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9432 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (memory corruption, segmentation fault, and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9433 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (out-of-bounds array access) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9434 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9435 
The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to <dd> tags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-20T15:00:00.000Z
CVE-2016-9436 
parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i> tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-20T15:00:00.000Z
CVE-2016-9437 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) and possibly memory corruption via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9438 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9439 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9440 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9441 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9442 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause memory corruption in certain conditions via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9443 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9444 
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-12T06:06:00.000Z
CVE-2016-9445 
Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via large width and height values, which triggers a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2016-9446 
The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z