VULNERABILITY INTELLIGENCE
CVE-2015-0797
CVSS score6.8 MEDIUM
EPSS probability5.40%
CISA KEVNot currently listed
Published2015-05-14
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.
Primary references
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Broken Link
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Vendor Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Issue Tracking, Patch, Vendor Advisory
- security@mozilla.org — Mailing List, Third Party Advisory