NetSight
IP …
medium6.8

CVE-2015-0797

GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to …

Impact

GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.

Affected products

VendorProductAffected versions
GstreamerGstreamer
before 1.4.5
MozillaFirefox
before 38.0
from 31.0 before 31.7
MozillaSeamonkey
before 2.35
MozillaThunderbird
before 31.7
from 38.0 before 38.0.1
SuseLinux Enterprise Desktop
Version 11
SuseLinux Enterprise Server
Version 11
SuseLinux Enterprise Software Development Kit
Version 11
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Eus
Versions 6.6, 7.1, 7.2, 7.3, 7.4, 7.5
RedhatEnterprise Linux Server
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 6.6, 7.3, 7.4, 7.6, 7.7
RedhatEnterprise Linux Server Tus
Versions 6.6, 7.3, 7.6, 7.7

References