Rapid7

vulnerability

Debian: DSA-3713: gst-plugins-bad0.10 -- security update

Severity
9
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:N)
Published
Nov 15, 2016
Added
Nov 15, 2016
Modified
Feb 19, 2025

Description

Chris Evans discovered that the GStreamer 0.10 plugin to decode NES


Sound Format files allowed the execution of arbitrary code. Further


details can be found in his advisory athttp://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-compromising-linux-desktop.html.

Solution

debian-upgrade-gst-plugins-bad0-10

References

Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.