VulnerabilityModified
CVE-2015-0797
GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute…
MEDIUM 6.8EPSS 5.40%
Does this matter?
Lower severity and a low EPSS score (5.40%). Track it; it rarely justifies an emergency change on its own.
Description
GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 5.40% probability · 92th percentile
- CISA KEV
- Not listed
- Affected
- gstreamer/gstreamer · mozilla/firefox · mozilla/seamonkey · mozilla/thunderbird · suse/linux enterprise desktop · suse/linux enterprise server · suse/linux enterprise software development kit · redhat/enterprise linux desktop · redhat/enterprise linux eus · redhat/enterprise linux server · redhat/enterprise linux server aus · redhat/enterprise linux server tus · redhat/enterprise linux workstation · debian/debian linux
- Source
- security@mozilla.org
References
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00017.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.htmlBroken Link
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.htmlMailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0988.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1012.htmlThird Party Advisory
- http://www.debian.org/security/2015/dsa-3225Third Party Advisory
- http://www.debian.org/security/2015/dsa-3260Third Party Advisory
- http://www.debian.org/security/2015/dsa-3264Third Party Advisory
- http://www.mozilla.org/security/announce/2015/mfsa2015-47.htmlVendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1080995Issue Tracking, Patch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2020/03/msg00038.htmlMailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201512-07Third Party Advisory
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00017.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.htmlBroken Link
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.htmlMailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0988.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1012.htmlThird Party Advisory
- http://www.debian.org/security/2015/dsa-3225Third Party Advisory
- http://www.debian.org/security/2015/dsa-3260Third Party Advisory
- http://www.debian.org/security/2015/dsa-3264Third Party Advisory
- http://www.mozilla.org/security/announce/2015/mfsa2015-47.htmlVendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1080995Issue Tracking, Patch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2020/03/msg00038.htmlMailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201512-07Third Party Advisory
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.