Back to Database
Status published
Medium
CVE-2015-0797
GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0,...
Vulnerability Description
GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-0797
Credits & Attribution
No credits recorded in the NVD database.
References
- http://rhn.redhat.com/errata/RHSA-2015-0988.html
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7
- http://www.mozilla.org/security/announce/2015/mfsa2015-47.html
- https://security.gentoo.org/glsa/201512-07
- http://www.debian.org/security/2015/dsa-3264
- http://www.debian.org/security/2015/dsa-3260
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1080995
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00017.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html
- http://rhn.redhat.com/errata/RHSA-2015-1012.html
- http://www.debian.org/security/2015/dsa-3225
- https://lists.debian.org/debian-lts-announce/2020/03/msg00038.html
More from gstreamer
View All →CVE-2024-47835
GHSL-2024-263: Gstreamer NULL-pointer dereference in LRC subtitle parser
Medium
6.8
CVE-2024-47834
GHSL-2024-280: Gstreamer Use-After-Free read in Matroska CodecPrivate
Medium
5.1
CVE-2024-47778
GHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunk
Medium
5.1
CVE-2024-47777
GHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunk
Medium
5.1
CVE-2024-47776
GHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk
Medium
5.1
Affected Vendor
gstreamer
View all reports →Affected Software
gstreamer, firefox, seamonkey, thunderbird, linux enterprise desktop, linux enterprise server, linux enterprise software development kit, enterprise linux desktop, enterprise linux eus, enterprise linux server, enterprise linux server aus, enterprise linux server tus, enterprise linux workstation, debian linux
Vulnerable Versions:
0, 31.0, 38.0, 11, 5.0, 6.0, 7.0, 6.6, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 8.0, 9.0
Timeline
Official Publish:
May 14th, 2015
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.