CVE-2015-0797

Опубликовано: 14 мая 2015

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00017.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0988.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1012.html
Third Party Advisory
http://www.debian.org/security/2015/dsa-3225
Third Party Advisory
http://www.debian.org/security/2015/dsa-3260
Third Party Advisory
http://www.debian.org/security/2015/dsa-3264
Third Party Advisory
http://www.mozilla.org/security/announce/2015/mfsa2015-47.html
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1080995
Issue Tracking
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2020/03/msg00038.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/201512-07
Third Party Advisory
https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00017.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0988.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1012.html
Third Party Advisory
http://www.debian.org/security/2015/dsa-3225
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*

Версия до 1.4.5 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия до 38.0 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 31.0 (включая) до 31.7 (исключая)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Версия до 2.35 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия до 31.7 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия от 38.0 (включая) до 38.0.1 (исключая)

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:6.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.1:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.07609

Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2015-0797

ubuntu

больше 10 лет назад

CVE-2015-0797

redhat

больше 10 лет назад

CVE-2015-0797

debian

больше 10 лет назад

GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefo ...

SUSE-SU-2015:0942-1

suse-cvrf

больше 10 лет назад

Security update for gstreamer-0_10-plugins-bad

SUSE-SU-2015:0921-1

suse-cvrf

больше 10 лет назад

Security update for gstreamer-0_10-plugins-bad

EPSS

Процентиль: 91%

0.07609

Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo