Description of problem:

Security issue as described above and here:

https://scarybeastsecurity.blogspot.de/2016/11/0day-poc-risky-design-decisions-in.html

Fixed with this commit:

https://cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit/gst/vmnc/vmncdec.c?id=4cb1bcf1422bbcd79c0f683edb7ee85e3f7a31fe

See also:

https://bugzilla.gnome.org/show_bug.cgi?id=774533

Version-Release number of selected component (if applicable):

gstreamer1-plugins-bad-free-1.8.3-1.fc24

Comment:

Apart from the fact, that mentioned crash needs 3rd-party software being installed in Fedora (Google Chrome), it would also being triggered, if a prepared file gets into the Home folder other ways. That's why I've chosen to set severity to high.