QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2014-8154

Back to search

CVE-2014-8154

Published: Jan 27, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration for the Gstreamer bindings, which allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors, which trigger a heap-based buffer overflow.

VendorProductVersions

n/a

n/a

affected
n/a

References

openSUSE-SU-2015:0131
vendor-advisory
x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now