• info
• discussion
• exploit
• solution
• references

GStreamer Bad Plug-ins CVE-2016-9445 Integer Overflow Vulnerability

GStreamer Bad Plug-ins is prone to an integer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer.

An attacker can exploit this issue to execute arbitrary code in the context of a user running the affected application. Failed exploit attempts may result in a denial-of-service condition.