Tracker / CVE-2015-0797
CVE-2015-0797
Medium 6.8
GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.
Affected products and versions
| debian | debian_linux |
|---|---|
| gstreamer | gstreamer · … → 1.4.5 |
| mozilla | firefox · … → 38.0 |
| mozilla | firefox · 31.0 → 31.7 |
| mozilla | seamonkey · … → 2.35 |
| mozilla | thunderbird · … → 31.7 |
| mozilla | thunderbird · 38.0 → 38.0.1 |
| redhat | enterprise_linux_desktop |
| redhat | enterprise_linux_eus |
| redhat | enterprise_linux_server |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_tus |
| redhat | enterprise_linux_workstation |
| suse | linux_enterprise_desktop |
| suse | linux_enterprise_server |
| suse | linux_enterprise_software_development_kit |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.