CVE-2016-9634 PUBLISHED

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via the start_line parameter.

EPSS 16.09% · 94.7th percentile

Risk Scores

EPSS Score
16.09%
94.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSgst-plugins-good1.00, 1.7.2-1ubuntu1, 1.8.2-1ubuntu0.1
Ubuntu:16.04:LTSgst-plugins-good0.100, 0.10.31-3+nmu4ubuntu2~gcc5.1
Ubuntu:14.04:LTSgst-plugins-good1.00, 1.2.4-1~ubuntu1, 1.2.3-1ubuntu2
Ubuntu:14.04:LTSgst-plugins-good0.100, 0.10.31-3+nmu1ubuntu5, 0.10.31-3+nmu1ubuntu4

Timeline

References

Open in Interactive Console →