CVE

Id
96456  
CVE No.
CVE-2016-9636  
Status
Candidate  
Description
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a "write count" that goes beyond the initialized buffer.  
Phase
Assigned (20161123)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
800962 96456 CVE-2016-9636 MLIST:[oss-security] 20161123 Re: CVE Request: gstreamer plugins  View
800963 96456 CVE-2016-9636 URL:http://www.openwall.com/lists/oss-security/2016/11/24/2  View
800964 96456 CVE-2016-9636 MISC:https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html  View
800965 96456 CVE-2016-9636 CONFIRM:https://bugzilla.gnome.org/show_bug.cgi?id=774834  View
800966 96456 CVE-2016-9636 CONFIRM:https://gstreamer.freedesktop.org/releases/1.10/#1.10.2  View
800967 96456 CVE-2016-9636 DEBIAN:DSA-3723  View
800968 96456 CVE-2016-9636 URL:http://www.debian.org/security/2016/dsa-3723  View
800969 96456 CVE-2016-9636 DEBIAN:DSA-3724  View
800970 96456 CVE-2016-9636 URL:http://www.debian.org/security/2016/dsa-3724  View
800971 96456 CVE-2016-9636 REDHAT:RHSA-2016:2975  View
800972 96456 CVE-2016-9636 URL:http://rhn.redhat.com/errata/RHSA-2016-2975.html  View
800973 96456 CVE-2016-9636 BID:94499  View

Related JVN