CVE-2016-9636
CriticalSummary
A heap-based buffer overflow in the flx_decode_delta_fli function in the FLIC decoder in GStreamer before version 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that exceeds the initialized buffer.
Risk Assessment
An attacker can exploit this vulnerability to execute code remotely, posing a serious security threat to the system and potentially causing application downtime.
Recommendation
It is recommended to update GStreamer to version 1.10.2 or later to mitigate this vulnerability.
Original NVD description (English source)
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that goes beyond the initialized buffer.