| Package | Affected versions | Patched versions |
|---|---|---|
| gstreamer | < 1.11.1 | 1.11.1 |
The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free