The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "gstreamer0.10-plugins-bad", "binary_version": "0.10.23-7.2ubuntu1.3" }, { "binary_name": "gstreamer0.10-plugins-bad-dbg", "binary_version": "0.10.23-7.2ubuntu1.3" }, { "binary_name": "gstreamer0.10-plugins-bad-dbgsym", "binary_version": "0.10.23-7.2ubuntu1.3" }, { "binary_name": "gstreamer0.10-plugins-bad-doc", "binary_version": "0.10.23-7.2ubuntu1.3" }, { "binary_name": "libgstreamer-plugins-bad0.10-0", "binary_version": "0.10.23-7.2ubuntu1.3" }, { "binary_name": "libgstreamer-plugins-bad0.10-0-dbgsym", "binary_version": "0.10.23-7.2ubuntu1.3" }, { "binary_name": "libgstreamer-plugins-bad0.10-dev", "binary_version": "0.10.23-7.2ubuntu1.3" }, { "binary_name": "libgstreamer-plugins-bad0.10-dev-dbgsym", "binary_version": "0.10.23-7.2ubuntu1.3" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "gstreamer1.0-hybris", "binary_version": "1.2.4-1~ubuntu1.1" }, { "binary_name": "gstreamer1.0-hybris-dbgsym", "binary_version": "1.2.4-1~ubuntu1.1" }, { "binary_name": "gstreamer1.0-plugins-bad", "binary_version": "1.2.4-1~ubuntu1.1" }, { "binary_name": "gstreamer1.0-plugins-bad-dbg", "binary_version": "1.2.4-1~ubuntu1.1" }, { "binary_name": "gstreamer1.0-plugins-bad-dbgsym", "binary_version": "1.2.4-1~ubuntu1.1" }, { "binary_name": "gstreamer1.0-plugins-bad-doc", "binary_version": "1.2.4-1~ubuntu1.1" }, { "binary_name": "gstreamer1.0-plugins-bad-faad", "binary_version": "1.2.4-1~ubuntu1.1" }, { "binary_name": "gstreamer1.0-plugins-bad-faad-dbgsym", "binary_version": "1.2.4-1~ubuntu1.1" }, { "binary_name": "gstreamer1.0-plugins-bad-videoparsers", "binary_version": "1.2.4-1~ubuntu1.1" }, { "binary_name": "gstreamer1.0-plugins-bad-videoparsers-dbgsym", "binary_version": "1.2.4-1~ubuntu1.1" }, { "binary_name": "libgstreamer-plugins-bad1.0-0", "binary_version": "1.2.4-1~ubuntu1.1" }, { "binary_name": "libgstreamer-plugins-bad1.0-0-dbgsym", "binary_version": "1.2.4-1~ubuntu1.1" }, { "binary_name": "libgstreamer-plugins-bad1.0-dev", "binary_version": "1.2.4-1~ubuntu1.1" }, { "binary_name": "libgstreamer-plugins-bad1.0-dev-dbgsym", "binary_version": "1.2.4-1~ubuntu1.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "gir1.2-gst-plugins-bad-1.0", "binary_version": "1.8.2-1ubuntu0.2" }, { "binary_name": "gir1.2-gst-plugins-bad-1.0-dbgsym", "binary_version": "1.8.2-1ubuntu0.2" }, { "binary_name": "gstreamer1.0-hybris", "binary_version": "1.8.2-1ubuntu0.2" }, { "binary_name": "gstreamer1.0-hybris-dbgsym", "binary_version": "1.8.2-1ubuntu0.2" }, { "binary_name": "gstreamer1.0-plugins-bad", "binary_version": "1.8.2-1ubuntu0.2" }, { "binary_name": "gstreamer1.0-plugins-bad-dbg", "binary_version": "1.8.2-1ubuntu0.2" }, { "binary_name": "gstreamer1.0-plugins-bad-dbgsym", "binary_version": "1.8.2-1ubuntu0.2" }, { "binary_name": "gstreamer1.0-plugins-bad-doc", "binary_version": "1.8.2-1ubuntu0.2" }, { "binary_name": "gstreamer1.0-plugins-bad-faad", "binary_version": "1.8.2-1ubuntu0.2" }, { "binary_name": "gstreamer1.0-plugins-bad-faad-dbgsym", "binary_version": "1.8.2-1ubuntu0.2" }, { "binary_name": "gstreamer1.0-plugins-bad-videoparsers", "binary_version": "1.8.2-1ubuntu0.2" }, { "binary_name": "gstreamer1.0-plugins-bad-videoparsers-dbgsym", "binary_version": "1.8.2-1ubuntu0.2" }, { "binary_name": "libgstreamer-plugins-bad1.0-0", "binary_version": "1.8.2-1ubuntu0.2" }, { "binary_name": "libgstreamer-plugins-bad1.0-0-dbgsym", "binary_version": "1.8.2-1ubuntu0.2" }, { "binary_name": "libgstreamer-plugins-bad1.0-dev", "binary_version": "1.8.2-1ubuntu0.2" }, { "binary_name": "libgstreamer-plugins-bad1.0-dev-dbgsym", "binary_version": "1.8.2-1ubuntu0.2" } ] }