[Secure-testing-team] Bug#845375: gst-plugins-good1.0: heap corruption vulnerability in the gstreamer decoder for the FLIC file format

[Salvatore Bonaccorso]

Source: gst-plugins-good1.0
Version: 1.4.4-2
Severity: grave
Tags: security upstream patch
Forwarded: https://bugzilla.gnome.org/show_bug.cgi?id=774834

Hi

See
https://scarybeastsecurity.blogspot.ch/2016/11/0day-exploit-advancing-exploitation.html
(there is no CVE assigned yet).

Upstream bug: https://bugzilla.gnome.org/show_bug.cgi?id=774834

Regards,
Salvatore