CVE-2016-9807: Medium severity GStreamer GStreamer vulnerability
Published Jan 13, 2017
·Updated
The flxdecodechunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted FLIC file.
Affected Software
1 affected component
GStreamer GStreamer<=1.10.1
Remediation
Event History
Jan 13, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-9807?
CVE-2016-9807 has a severity rating that indicates it allows for denial of service through invalid memory access.
2
How do I fix CVE-2016-9807?
To fix CVE-2016-9807, you should upgrade GStreamer to version 1.10.2 or later.
3
What causes the vulnerability in CVE-2016-9807?
CVE-2016-9807 is caused by the flx_decode_chunks function allowing remote attackers to exploit crafted FLIC files.
4
What impact does CVE-2016-9807 have on systems?
The impact of CVE-2016-9807 on systems includes potential crashes due to invalid memory reads.
5
Is CVE-2016-9807 present in GStreamer versions after 1.10.1?
Yes, CVE-2016-9807 is present in GStreamer versions 1.10.1 and earlier.