Gstreamer
CVE-2017-5842
MEDIUM
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted SMI file, as demonstrated by OneNote_Manager.smi.
AnalysisAI
A out-of-bounds write vulnerability exists in the SAMI subtitle parser (samiparse.c) within GStreamer's gst-plugins-base library before version 1.10.3, triggered when processing maliciously crafted SMI subtitle files. The vulnerability allows remote attackers to cause a denial of service condition by crashing the application through memory corruption. With an EPSS score of 0.80% (74th percentile), patch availability from the vendor, and documented proof-of-concept files (OneNote_Manager.smi), this represents a low-to-moderate exploitation risk despite the moderate CVSS 5.5 score.
Technical ContextAI
The vulnerability resides in the html_context_handle_element function within gst/subparse/samiparse.c, which is part of GStreamer's subtitle parsing subsystem. GStreamer (CPE: cpe:2.3:a:gstreamer:gstreamer) is a multimedia framework used across Linux distributions and media applications for audio/video processing and subtitle handling. The root cause is classified as CWE-787 (Out-of-bounds Write), where insufficient bounds checking in the SAMI parser allows an attacker-controlled SMI file to write data beyond allocated buffer boundaries. SAMI (Synchronized Accessible Media Interchange) is a legacy caption format commonly embedded in media containers; the parser fails to properly validate element attributes or buffer sizes before writing parsed content, leading to heap or stack corruption depending on memory layout.
RemediationAI
Upgrade GStreamer and gst-plugins-base to version 1.10.3 or later as advised by the GStreamer project (https://gstreamer.freedesktop.org/releases/1.10/#1.10.3). For Linux distributions, apply official patches via package managers: Debian users should apply DSA-3819, Red Hat users should apply RHSA-2017:2060, and Gentoo users should apply GLSA-201705-10. Until patching is possible, restrict the use of GStreamer to process only subtitle files from trusted sources, disable automatic subtitle loading in media players, and avoid opening SAMI files (.smi) from untrusted origins. Organizations should prioritize patching systems in environments where GStreamer processes user-supplied or internet-sourced subtitle content.
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write an
A heap-based buffer overflow vulnerability exists in GStreamer's RTSP connection parser that allows remote attackers to
A heap buffer over-read vulnerability exists in GStreamer's isomp4 plugin that allows reading past allocated memory boun
An integer overflow vulnerability in the GStreamer multimedia framework's matroska demuxer allows heap memory corruption
A critical integer overflow vulnerability in GStreamer's qtdemux element allows attackers to trigger denial of service o
A critical integer overflow vulnerability in the GStreamer multimedia framework's Matroska (MKV) demuxer can cause denia
An integer overflow vulnerability in GStreamer's Matroska demuxer can cause denial of service or potentially heap memory
An integer overflow vulnerability in GStreamer's AVI demux element allows attackers to trigger a heap overwrite when par
A heap overflow vulnerability exists in GStreamer's matroskaparse element due to an integer overflow in the gst_matroska
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today