CVE-2016-9636 PUBLISHED

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that goes beyond the initialized buffer.

EPSS 16.64% · 94.9th percentile

Risk Scores

EPSS Score
16.64%
94.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSgst-plugins-good0.100, 0.10.31-3+nmu4ubuntu2~gcc5.1
Ubuntu:16.04:LTSgst-plugins-good1.01.6.1-1ubuntu1, 0, 1.6.0-1ubuntu1
Ubuntu:14.04:LTSgst-plugins-good0.100.10.31-3+nmu1ubuntu3, 0, 0.10.31-3+nmu1ubuntu5
Ubuntu:14.04:LTSgst-plugins-good1.01.2.2-1ubuntu1, 1.2.3-1ubuntu1, 1.2.4-1~ubuntu1

Timeline

References

Open in Interactive Console →