← back
CVE-2015-0797

CVE-2015-0797

EPSS 5.4%
GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00017.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0988.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1012.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=1080995https://lists.debian.org/debian-lts-announce/2020/03/msg00038.htmlhttps://security.gentoo.org/glsa/201512-07https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7http://www.debian.org/security/2015/dsa-3225http://www.debian.org/security/2015/dsa-3260http://www.debian.org/security/2015/dsa-3264