CVE-2016-9635 PUBLISHED

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.

EPSS 16.09% · 94.7th percentile

Risk Scores

EPSS Score
16.09%
94.7th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSgst-plugins-good1.01.2.2-1ubuntu1, 0, 1.2.1-1ubuntu1
Ubuntu:16.04:LTSgst-plugins-good1.01.6.1-1ubuntu1, 1.7.91-1ubuntu1, 1.7.2-1ubuntu1
Ubuntu:14.04:LTSgst-plugins-good0.100.10.31-3+nmu1ubuntu3, 0.10.31-3+nmu1ubuntu5, *
Ubuntu:16.04:LTSgst-plugins-good0.100.10.31-3+nmu4ubuntu2~gcc5.1, 0

Timeline

References

Open in Interactive Console →