CVE-2016-9635
CriticalSummary
A heap-based buffer overflow in the flx_decode_delta_fli function in the FLIC decoder in GStreamer before version 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.
Risk Assessment
An attacker can exploit this vulnerability to execute arbitrary code remotely, posing a serious security threat to the system and potentially leading to application crashes.
Recommendation
It is recommended to update GStreamer to version 1.10.2 or later to mitigate this vulnerability.
Original NVD description (English source)
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.