Back to search
CVE-2016-9635
Published: Jan 27, 2017
Modified: Aug 6, 2024
PUBLISHED
Description
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
DSA-3724
vendor-advisory
x_refsource_DEBIAN
RHSA-2017:0019
vendor-advisory
x_refsource_REDHAT
RHSA-2016:2975
vendor-advisory
x_refsource_REDHAT
DSA-3723
vendor-advisory
x_refsource_DEBIAN
RHSA-2017:0020
vendor-advisory
x_refsource_REDHAT
94499
vdb-entry
x_refsource_BID
https://gstreamer.freedesktop.org/releases/1.10/#1.10.2
x_refsource_CONFIRM
[oss-security] 20161123 Re: CVE Request: gstreamer plugins
mailing-list
x_refsource_MLIST
https://bugzilla.gnome.org/show_bug.cgi?id=774834
x_refsource_CONFIRM
GLSA-201705-10
vendor-advisory
x_refsource_GENTOO
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now