CVE-2016-9808: High severity GStreamer GStreamer vulnerability
Published Jan 13, 2017
·Updated
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted series of skip and count pairs.
Affected Software
1 affected component
GStreamer GStreamer<=1.10.1
Event History
Jan 13, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-9808?
CVE-2016-9808 has been classified as a moderate severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2016-9808?
To fix CVE-2016-9808, upgrade GStreamer to version 1.10.2 or later.
3
What causes the vulnerability in CVE-2016-9808?
The vulnerability in CVE-2016-9808 is caused by an out-of-bounds write in the FLIC decoder.
4
Can CVE-2016-9808 be exploited remotely?
Yes, CVE-2016-9808 can be exploited by remote attackers through crafted data.
5
Which versions of GStreamer are affected by CVE-2016-9808?
CVE-2016-9808 affects GStreamer versions prior to 1.10.2.