{"id":"CVE-2015-0797","aliases":["DEBIAN-CVE-2015-0797","DLA-2164-1","DSA-3225-1","DSA-3260-1","DSA-3264-1","EUVD-2015-0810","GHSA-wvj4-9m85-jjv9","MGASA-2015-0188","RHSA-2015:0988","SUSE-SU-2015:0921-1","SUSE-SU-2015:0942-1","SUSE-SU-2015:0960-1","SUSE-SU-2015:0978-1","UBUNTU-CVE-2015-0797","openSUSE-SU-2024:10429-1"],"status":"published","title":"GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and...","description":"GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.05402,"percentile":0.92719,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2015-04-15T00:00:00Z","modified":"2026-08-01T10:02:23Z","fixes":[{"ecosystem":"Debian:7","package":"gst-plugins-bad0.10","fixed_in":["0.10.23-7.1+deb7u2"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"gstreamer0.10-plugins-bad","fixed_in":["0.10.23-14.1.mga4","0.10.23-14.1.mga4.tainted"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"gstreamer-0_10-plugins-bad","fixed_in":["0.10.23-17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"gstreamer-0_10-plugins-bad","fixed_in":["0.10.23-17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"gstreamer-0_10-plugins-bad","fixed_in":["0.10.23-17.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"gst-plugins-bad0.10","fixed_in":["0.10.23-7.2ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:8","package":"gst-plugins-bad0.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.23-7.4+deb8u3"}]}],"versions":["0.10.23-7.4","0.10.23-7.4+deb8u1","0.10.23-7.4+deb8u2"],"bundled":4},{"source":"osv","ecosystem":"Debian:7","package":"gst-plugins-bad0.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.23-7.1+deb7u2"}]}],"versions":["0.10.23-7.1","0.10.23-7.1+deb7u1"]},{"source":"osv","ecosystem":"Debian:7","package":"iceweasel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"31.7.0esr-1~deb7u1"}]}],"versions":["10.0.12esr-1","10.0.12esr-1+alpha","10.0.12esr-1+nmu1","10.0.12esr-1+nmu1+alpha","11.0-1","11.0-2","11.0-3","11.0-4","11.0~b1-1","11.0~b1-2","11.0~b2-1","11.0~b3-1","11.0~b4-1","11.0~b5-1","11.0~b6-1","12.0-1","12.0-2","12.0-3","12.0-4","12.0-5","12.0-6","12.0-7","13.0-1","13.0.1-1","13.0.1-2","14.0.1-1","14.0.1-2","15.0-1","15.0.1-1","16.0-1","16.0.1-1","16.0.2-1","17.0-1","17.0.1-1","17.0.1-2","17.0.10esr-1~deb7u1","17.0.5esr-1","17.0.6esr-1","17.0.6esr-1~deb7u1","17.0.7esr-1","17.0.7esr-1~deb7u1","17.0.7esr-2","17.0.8esr-1","17.0.8esr-1~deb7u1","17.0.8esr-2","17.0.8esr-2~deb7u1","17.0.9esr-1~deb7u1","18.0-1","18.0.1-1","18.0.2-1","19.0-1","19.0.2-1","20.0-1","21.0-1","22.0-1","23.0-1","23.0-2","23.0.1-1","24.0-1","24.0-2","24.0~b4-1","24.0~b7-1","24.0~b9-1","24.1.0esr-1","24.1.0esr-1+powerpcspe1","24.2.0esr-1","24.2.0esr-1+alpha","24.2.0esr-1+powerpcspe1","24.3.0esr-1","24.3.0esr-1+alpha","24.3.0esr-1~deb7u1","24.4.0esr-1","24.4.0esr-1~deb7u2","24.5.0esr-1","24.5.0esr-1~deb7u1","24.6.0esr-1~deb7u1","24.7.0esr-1~deb7u1","24.8.0esr-1~deb7u1","24.8.1esr-1~deb7u1","25.0-1","25.0~b3-1","25.0~b9-1","26.0-1","27.0-1","27.0-2","27.0.1-1","28.0-1","29.0-1","29.0-2","29.0.1-1","29.0.1-1+alpha","29.0.1-2","30.0-1","30.0-2","30.0~b3-1","30.0~b5-1","30.0~b5-2","30.0~b5-3","30.0~b7-1","31.0-1","31.0-2","31.0-3","31.0~b1-1","31.0~b3-1","31.1.0esr-1","31.2.0esr-1","31.2.0esr-1~deb7u1","31.2.0esr-2","31.2.0esr-2+hurd.0","31.2.0esr-2~deb7u1","31.2.0esr-3","31.2.0esr-3~deb7u1","31.3.0esr-1","31.3.0esr-1+powerpcspe1","31.3.0esr-1~deb7u1","31.4.0esr-1","31.4.0esr-1~deb7u1","31.5.0esr-1","31.5.0esr-1~deb7u1","31.5.3esr-1","31.5.3esr-1~deb7u1","31.6.0esr-1","31.6.0esr-1~deb7u1"],"bundled":6},{"source":"osv","ecosystem":"Debian:8","package":"iceweasel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"31.7.0esr-1~deb8u1"}]}],"versions":["31.6.0esr-1","31.7.0esr-1~deb7u1"],"bundled":6},{"source":"osv","ecosystem":"Debian:7","package":"icedove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"31.7.0-1~deb7u1"}]}],"versions":["10.0.12-1","11.0-1","16.0.2-1","17.0-1","17.0.10-1","17.0.10-1+powerpcspe1","17.0.10-1+powerpcspe2","17.0.10-1~deb7u1","17.0.2-1","17.0.4-1","17.0.5-1","17.0.5-2","17.0.7-1","17.0.7-1~deb7u1","17.0.8-1","17.0.8-1~deb7u1","17.0.9-1","17.0.9-1~deb7u1","17.0.9-2","24.0-1","24.0~b3-2","24.1.1-1","24.2.0-1","24.2.0-1+alpha","24.2.0-1+powerpcspe1","24.3.0-1","24.3.0-2","24.4.0-1","24.4.0-1~deb7u1","24.5.0-1","24.5.0-1~deb7u1","24.5.0-2","24.6.0-1~deb7u1","24.7.0-1~deb7u1","24.8.0-1~deb7u1","24.8.1-1~deb7u1","30.0~b1-1","31.0-1","31.0-2","31.0-3","31.0~b1-2","31.0~b2-1","31.1.2-1","31.2.0-1","31.2.0-1~deb7u1","31.3.0-1","31.3.0-1+powerpcspe1","31.3.0-1~deb7u1","31.4.0-1","31.4.0-1~deb7u1","31.4.0-2","31.5.0-1","31.5.0-1~deb7u1","31.6.0-1","31.6.0-1~deb7u1"],"bundled":5},{"source":"osv","ecosystem":"Debian:8","package":"icedove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"31.7.0-1~deb8u1"}]}],"versions":["31.6.0-1","31.7.0-1~deb7u1"],"bundled":5},{"source":"osv","ecosystem":"Mageia:4","package":"gstreamer0.10-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.23-14.1.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"gstreamer0.10-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.23-14.1.mga4.tainted"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-4.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-4.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-4.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-4.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-4.el6_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-4.el6_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-4.el6_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-4.el6_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-4.el6_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-4.el6_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-4.el6_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-4.el6_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-3.el7_1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-3.el7_1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-3.el7_1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-3.el7_1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-3.el7_1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.0-3.el7_1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"gstreamer-0_10-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.23-17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"gstreamer-0_10-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.23-17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"gstreamer-0_10-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.23-17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"31.7.0esr-34.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"31.7.0esr-34.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"31.7.0esr-34.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"31.7.0esr-34.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gst-plugins-bad0.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.23-7.2ubuntu1.1"}]}],"versions":["0.10.23-7ubuntu2","0.10.23-7.2ubuntu1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gstreamer","product":"gstreamer"},{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"seamonkey"},{"vendor":"mozilla","product":"thunderbird"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"suse","product":"linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_server"},{"vendor":"suse","product":"linux_enterprise_software_development_kit"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2015-0988.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/2015/mfsa2015-47.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","article"]},{"url":"https://security.gentoo.org/glsa/201512-07","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3264","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3260","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1080995","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00017.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1012.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3225","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/03/msg00038.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0797","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wvj4-9m85-jjv9"},{"url":"https://advisories.mageia.org/MGASA-2015-0188.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15713","tags":["report"]},{"url":"https://www.debian.org/security/2015/dsa-3225","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0988","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr31.7","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1220597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1220600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1220601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1220605","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1220607","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0988.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0797","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0797","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2708","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2708","tags":["advisory"]},{"url":"http://www.mozilla.org/security/announce/2015/mfsa2015-46.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2710","tags":["advisory"]},{"url":"http://www.mozilla.org/security/announce/2015/mfsa2015-48.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2713","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2713","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2713","tags":["advisory"]},{"url":"http://www.mozilla.org/security/announce/2015/mfsa2015-51.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2716","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2716","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2716","tags":["advisory"]},{"url":"http://www.mozilla.org/security/announce/2015/mfsa2015-54.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1253550","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4496","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4496","tags":["advisory"]},{"url":"https://www.mozilla.org/security/announce/2015/mfsa2015-93.html","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150921-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/927559","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0797","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150942-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150960-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/930622","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2716","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150978-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-0797","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2015-0797","description":"GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.","status":"published","published":"2015-05-14T10:00:00Z","modified":"2024-08-06T04:26:10.193Z","updated_at":"2026-11-02T14:35:45.428221Z"}],"euvd":[{"id":"EUVD-2015-0810","description":"GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.","status":"published","published":"2015-05-14T10:00:00Z","modified":"2024-08-06T04:26:10Z","updated_at":"2026-11-03T02:22:18.008513Z"}],"ghsa":[{"id":"GHSA-wvj4-9m85-jjv9","title":"GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and...","description":"GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.","status":"published","published":"2022-05-13T01:15:24Z","modified":"2023-02-01T05:04:43Z","updated_at":"2026-11-02T14:50:10.892175Z"}],"nvd":[{"id":"CVE-2015-0797","description":"GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.","status":"published","published":"2015-05-14T10:59:00.07Z","modified":"2026-06-17T00:20:54.91Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:04.906059Z"}],"osv":[{"id":"DLA-2164-1","title":"gst-plugins-bad0.10 - security update","status":"published","published":"2020-03-31T00:00:00Z","modified":"2026-03-09T01:20:09.657728Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-3225-1","title":"gst-plugins-bad0.10 - security update","status":"published","published":"2015-04-15T00:00:00Z","modified":"2026-03-09T01:18:29.31262Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"DSA-3260-1","title":"iceweasel - security update","status":"published","published":"2015-05-13T00:00:00Z","modified":"2026-03-09T01:20:59.159439Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"DSA-3264-1","title":"icedove - security update","status":"published","published":"2015-05-19T00:00:00Z","modified":"2026-03-09T01:20:12.177017Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2015-0188","title":"Updated gstreamer0.10-plugins-bad packages fix security vulnerabilities","description":"Updated gstreamer0.10-plugins-bad packages fix security vulnerability:\n\nAki Helin discovered a buffer overflow in the GStreamer plugin for MP4\nplayback, which could lead in the execution of arbitrary code\n(CVE-2015-0797).\n","status":"published","published":"2015-05-05T13:36:50Z","modified":"2026-04-16T06:25:58.785980915Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10429-1","title":"gstreamer-0_10-plugins-bad-0.10.23-22.4 on GA media","description":"These are all security issues fixed in the gstreamer-0_10-plugins-bad-0.10.23-22.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:06:06.567464Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2015:0988","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-15T22:30:54Z","modified":"2026-08-01T10:02:23Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:0921-1","title":"Security update for gstreamer-0_10-plugins-bad","description":"\ngstreamer-0_10-plugins-bad was updated to fix a security issue, a buffer \noverflow in mp4 parsing (bnc#927559 CVE-2015-0797).\n\nSecurity Issues:\n\n    * CVE-2015-0797\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0797\u003e\n\n","status":"published","published":"2015-04-27T13:17:57Z","modified":"2026-02-04T03:25:03.653303Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0942-1","title":"Security update for gstreamer-0_10-plugins-bad","description":"\ngstreamer-0_10-plugins-bad was updated to fix a security issue,\na buffer overflow in mp4 parsing (bnc#927559 CVE-2015-0797).\n","status":"published","published":"2015-04-24T15:04:46Z","modified":"2025-05-02T04:04:21.833515Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0960-1","title":"Security update for MozillaFirefox","description":"\nThis update to Firefox 31.7.0 ESR (bsc#930622) fixes the following issues:\n\n  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709\n    (bmo#1120655, bmo#1143299, bmo#1151139, bmo#1152177,\n     bmo#1111251, bmo#1117977, bmo#1128064, bmo#1135066,\n     bmo#1143194, bmo#1146101, bmo#1149526, bmo#1153688,\n     bmo#1155474)\n    Miscellaneous memory safety hazards (rv:38.0 / rv:31.7)\n  * MFSA 2015-47/CVE-2015-0797\n    (bmo#1080995)\n    Buffer overflow parsing H.264 video with Linux Gstreamer\n  * MFSA 2015-48/CVE-2015-2710\n    (bmo#1149542)\n    Buffer overflow with SVG content and CSS\n  * MFSA 2015-51/CVE-2015-2713\n    (bmo#1153478)\n    Use-after-free during text processing with vertical text\n    enabled\n  * MFSA 2015-54/CVE-2015-2716\n    (bmo#1140537)\n    Buffer overflow when parsing compressed XML\n","status":"published","published":"2015-05-21T08:36:37Z","modified":"2026-02-04T02:28:23.440744Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0978-1","title":"Security update for MozillaFirefox","description":"\nThis update to Firefox 31.7.0 ESR fixes the following issues:\n\n    * \n\n      MFSA 2015-46 (CVE-2015-2708, CVE-2015-2709): Miscellaneous memory\n      safety hazards (rv:38.0 / rv:31.7). Upstream references: bmo#1120655,\n      bmo#1143299, bmo#1151139, bmo#1152177, bmo#1111251, bmo#1117977,\n      bmo#1128064, bmo#1135066, bmo#1143194, bmo#1146101, bmo#1149526,\n      bmo#1153688, bmo#1155474.\n\n    * \n\n      MFSA 2015-47 (CVE-2015-0797): Buffer overflow parsing H.264 video\n      with Linux Gstreamer. Upstream references: bmo#1080995.\n\n    * \n\n      MFSA 2015-48 (CVE-2015-2710): Buffer overflow with SVG content and\n      CSS. Upstream references: bmo#1149542.\n\n    * \n\n      MFSA 2015-51 (CVE-2015-2713): Use-after-free during text processing\n      with vertical text enabled. Upstream references: bmo#1153478.\n\n    * \n\n      MFSA 2015-54 (CVE-2015-2716): Buffer overflow when parsing compressed\n      XML. Upstream references: bmo#1140537.\n\nSecurity Issues:\n\n    * CVE-2015-0797\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0797\u003e\n    * CVE-2015-2708\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2708\u003e\n    * CVE-2015-2709\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2709\u003e\n    * CVE-2015-2710\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2710\u003e\n    * CVE-2015-2713\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2713\u003e\n    * CVE-2015-2716\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2716\u003e\n\n","status":"published","published":"2015-05-19T09:15:45Z","modified":"2026-02-04T04:01:40.610312Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2015-0797","description":"GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.","status":"published","published":"2015-05-14T10:59:00Z","modified":"2026-04-22T09:56:52.243639Z","updated_at":"2026-11-02T15:54:09.721803Z"}]}}