CVE-2015-0797

GStreamer < 1.4.5 - Denial of Service or Remote Code Execution via Crafted H.264 Video Data

Title source: llm

Description

GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.

References (14)

Core 14

Core References

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2015-0988.html

Vendor Advisory x_refsource_confirm

https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7

Vendor Advisory x_refsource_confirm

http://www.mozilla.org/security/announce/2015/mfsa2015-47.html

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/201512-07

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2015/dsa-3264

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2015/dsa-3260

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html

Third Party Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Issue Tracking, Patch, Vendor Advisory x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=1080995

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00017.html

Broken Link vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2015-1012.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2015/dsa-3225

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

https://lists.debian.org/debian-lts-announce/2020/03/msg00038.html

Scores

EPSS 0.0761

EPSS Percentile 92.0%

Details

Status published

Products (37)

debian/debian_linux 7.0

debian/debian_linux 8.0

debian/debian_linux 9.0

gstreamer/gstreamer < 1.4.5

gstreamer_project/gstreamer < 1.4.5

mozilla/firefox < 38.0

mozilla/seamonkey < 2.35

mozilla/thunderbird < 31.7

redhat/enterprise_linux_desktop 5.0

redhat/enterprise_linux_desktop 6.0

... and 27 more

Published May 14, 2015

Tracked Since Feb 18, 2026