CVE:CVE-2016-9446
CNNVD:CNNVD-201611-453
GStreamer是一套用于处理流媒体的框架。vmnc decoder是其中的一个解码器组件。
GStreamer中的vmnc解码器存在安全漏洞，该漏洞源于程序没有初始化render canvas。远程攻击者可利用该漏洞获取敏感信息。
solution:Upgrade gstreamer_project gstreamer to a higher version than 1.11.1,and avoid the version (,1.11.1); Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.4,7.5,7.6,7.7,and avoid the version 7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,7.6,7.7,and avoid the version 7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,7.7,and avoid the version 7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35