CVE

Id
96455  
CVE No.
CVE-2016-9635  
Status
Candidate  
Description
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a "skip count" that goes beyond initialized buffer.  
Phase
Assigned (20161123)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
800950 96455 CVE-2016-9635 MLIST:[oss-security] 20161123 Re: CVE Request: gstreamer plugins  View
800951 96455 CVE-2016-9635 URL:http://www.openwall.com/lists/oss-security/2016/11/24/2  View
800952 96455 CVE-2016-9635 MISC:https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html  View
800953 96455 CVE-2016-9635 CONFIRM:https://bugzilla.gnome.org/show_bug.cgi?id=774834  View
800954 96455 CVE-2016-9635 CONFIRM:https://gstreamer.freedesktop.org/releases/1.10/#1.10.2  View
800955 96455 CVE-2016-9635 DEBIAN:DSA-3723  View
800956 96455 CVE-2016-9635 URL:http://www.debian.org/security/2016/dsa-3723  View
800957 96455 CVE-2016-9635 DEBIAN:DSA-3724  View
800958 96455 CVE-2016-9635 URL:http://www.debian.org/security/2016/dsa-3724  View
800959 96455 CVE-2016-9635 REDHAT:RHSA-2016:2975  View
800960 96455 CVE-2016-9635 URL:http://rhn.redhat.com/errata/RHSA-2016-2975.html  View
800961 96455 CVE-2016-9635 BID:94499  View

Related JVN