CVE catalog

CVE-2015-0797

Security update for gstreamer-0_10-plugins-bad

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
5.40% · Oct 25, 2026

GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntugst-plugins-bad0.1014.040.10.23-7ubuntu2vulnerable
Ubuntugst-plugins-bad0.1014.040.10.23-7.2ubuntu1vulnerable
Ubuntugst-plugins-bad0.1014.040.10.23-7.2ubuntu1.1fixed
Debianiceweasel710.0.12esr-1vulnerable
Debianiceweasel710.0.12esr-1+alphavulnerable
Debianiceweasel710.0.12esr-1+nmu1vulnerable
Debianiceweasel710.0.12esr-1+nmu1+alphavulnerable
Debianiceweasel711.0-1vulnerable
Debianiceweasel711.0-2vulnerable
Debianiceweasel711.0-3vulnerable
Debianiceweasel711.0-4vulnerable
Debianiceweasel711.0~b1-1vulnerable
Debianiceweasel711.0~b1-2vulnerable
Debianiceweasel711.0~b2-1vulnerable
Debianiceweasel711.0~b3-1vulnerable
Debianiceweasel711.0~b4-1vulnerable
Debianiceweasel711.0~b5-1vulnerable
Debianiceweasel711.0~b6-1vulnerable
Debianiceweasel712.0-1vulnerable
Debianiceweasel712.0-2vulnerable
Debianiceweasel712.0-3vulnerable
Debianiceweasel712.0-4vulnerable
Debianiceweasel712.0-5vulnerable
Debianiceweasel712.0-6vulnerable
Debianiceweasel712.0-7vulnerable
Debianiceweasel713.0-1vulnerable
Debianiceweasel713.0.1-1vulnerable
Debianiceweasel713.0.1-2vulnerable
Debianiceweasel714.0.1-1vulnerable
Debianiceweasel714.0.1-2vulnerable
Debianiceweasel715.0-1vulnerable
Debianiceweasel715.0.1-1vulnerable
Debianiceweasel716.0-1vulnerable
Debianiceweasel716.0.1-1vulnerable
Debianiceweasel716.0.2-1vulnerable
Debianiceweasel717.0-1vulnerable
Debianiceweasel717.0.1-1vulnerable
Debianiceweasel717.0.1-2vulnerable
Debianiceweasel717.0.10esr-1~deb7u1vulnerable
Debianiceweasel717.0.5esr-1vulnerable
Debianiceweasel717.0.6esr-1vulnerable
Debianiceweasel717.0.6esr-1~deb7u1vulnerable
Debianiceweasel717.0.7esr-1vulnerable
Debianiceweasel717.0.7esr-1~deb7u1vulnerable
Debianiceweasel717.0.7esr-2vulnerable
Debianiceweasel717.0.8esr-1vulnerable
Debianiceweasel717.0.8esr-1~deb7u1vulnerable
Debianiceweasel717.0.8esr-2vulnerable
Debianiceweasel717.0.8esr-2~deb7u1vulnerable
Debianiceweasel717.0.9esr-1~deb7u1vulnerable
Debianiceweasel718.0-1vulnerable
Debianiceweasel718.0.1-1vulnerable
Debianiceweasel718.0.2-1vulnerable
Debianiceweasel719.0-1vulnerable
Debianiceweasel719.0.2-1vulnerable
Debianiceweasel720.0-1vulnerable
Debianiceweasel721.0-1vulnerable
Debianiceweasel722.0-1vulnerable
Debianiceweasel723.0-1vulnerable
Debianiceweasel723.0-2vulnerable
Debianiceweasel723.0.1-1vulnerable
Debianiceweasel724.0-1vulnerable
Debianiceweasel724.0-2vulnerable
Debianiceweasel724.0~b4-1vulnerable
Debianiceweasel724.0~b7-1vulnerable
Debianiceweasel724.0~b9-1vulnerable
Debianiceweasel724.1.0esr-1vulnerable
Debianiceweasel724.1.0esr-1+powerpcspe1vulnerable
Debianiceweasel724.2.0esr-1vulnerable
Debianiceweasel724.2.0esr-1+alphavulnerable
Debianiceweasel724.2.0esr-1+powerpcspe1vulnerable
Debianiceweasel724.3.0esr-1vulnerable
Debianiceweasel724.3.0esr-1+alphavulnerable
Debianiceweasel724.3.0esr-1~deb7u1vulnerable
Debianiceweasel724.4.0esr-1vulnerable
Debianiceweasel724.4.0esr-1~deb7u2vulnerable
Debianiceweasel724.5.0esr-1vulnerable
Debianiceweasel724.5.0esr-1~deb7u1vulnerable
Debianiceweasel724.6.0esr-1~deb7u1vulnerable
Debianiceweasel724.7.0esr-1~deb7u1vulnerable
Debianiceweasel724.8.0esr-1~deb7u1vulnerable
Debianiceweasel724.8.1esr-1~deb7u1vulnerable
Debianiceweasel725.0-1vulnerable
Debianiceweasel725.0~b3-1vulnerable
Debianiceweasel725.0~b9-1vulnerable
Debianiceweasel726.0-1vulnerable
Debianiceweasel727.0-1vulnerable
Debianiceweasel727.0-2vulnerable
Debianiceweasel727.0.1-1vulnerable
Debianiceweasel728.0-1vulnerable
Debianiceweasel729.0-1vulnerable
Debianiceweasel729.0-2vulnerable
Debianiceweasel729.0.1-1vulnerable
Debianiceweasel729.0.1-1+alphavulnerable
Debianiceweasel729.0.1-2vulnerable
Debianiceweasel730.0-1vulnerable
Debianiceweasel730.0-2vulnerable
Debianiceweasel730.0~b3-1vulnerable
Debianiceweasel730.0~b5-1vulnerable
Debianiceweasel730.0~b5-2vulnerable
Debianiceweasel730.0~b5-3vulnerable
Debianiceweasel730.0~b7-1vulnerable
Debianiceweasel731.0-1vulnerable
Debianiceweasel731.0-2vulnerable
Debianiceweasel731.0-3vulnerable
Debianiceweasel731.0~b1-1vulnerable
Debianiceweasel731.0~b3-1vulnerable
Debianiceweasel731.1.0esr-1vulnerable
Debianiceweasel731.2.0esr-1vulnerable
Debianiceweasel731.2.0esr-1~deb7u1vulnerable
Debianiceweasel731.2.0esr-2vulnerable
Debianiceweasel731.2.0esr-2+hurd.0vulnerable
Debianiceweasel731.2.0esr-2~deb7u1vulnerable
Debianiceweasel731.2.0esr-3vulnerable
Debianiceweasel731.2.0esr-3~deb7u1vulnerable
Debianiceweasel731.3.0esr-1vulnerable
Debianiceweasel731.3.0esr-1+powerpcspe1vulnerable
Debianiceweasel731.3.0esr-1~deb7u1vulnerable
Debianiceweasel731.4.0esr-1vulnerable
Debianiceweasel731.4.0esr-1~deb7u1vulnerable
Debianiceweasel731.5.0esr-1vulnerable
Debianiceweasel731.5.0esr-1~deb7u1vulnerable
Debianiceweasel731.5.3esr-1vulnerable
Debianiceweasel731.5.3esr-1~deb7u1vulnerable
Debianiceweasel731.6.0esr-1vulnerable
Debianiceweasel731.6.0esr-1~deb7u1vulnerable
Debianiceweasel731.7.0esr-1~deb7u1fixed
Debianiceweasel831.6.0esr-1vulnerable
Debianiceweasel831.7.0esr-1~deb7u1vulnerable
Debianiceweasel831.7.0esr-1~deb8u1fixed
Debianicedove710.0.12-1vulnerable
Debianicedove711.0-1vulnerable
Debianicedove716.0.2-1vulnerable
Debianicedove717.0-1vulnerable
Debianicedove717.0.10-1vulnerable
Debianicedove717.0.10-1+powerpcspe1vulnerable
Debianicedove717.0.10-1+powerpcspe2vulnerable
Debianicedove717.0.10-1~deb7u1vulnerable
Debianicedove717.0.2-1vulnerable
Debianicedove717.0.4-1vulnerable
Debianicedove717.0.5-1vulnerable
Debianicedove717.0.5-2vulnerable
Debianicedove717.0.7-1vulnerable
Debianicedove717.0.7-1~deb7u1vulnerable
Debianicedove717.0.8-1vulnerable
Debianicedove717.0.8-1~deb7u1vulnerable
Debianicedove717.0.9-1vulnerable
Debianicedove717.0.9-1~deb7u1vulnerable
Debianicedove717.0.9-2vulnerable
Debianicedove724.0-1vulnerable
Debianicedove724.0~b3-2vulnerable
Debianicedove724.1.1-1vulnerable
Debianicedove724.2.0-1vulnerable
Debianicedove724.2.0-1+alphavulnerable
Debianicedove724.2.0-1+powerpcspe1vulnerable
Debianicedove724.3.0-1vulnerable
Debianicedove724.3.0-2vulnerable
Debianicedove724.4.0-1vulnerable
Debianicedove724.4.0-1~deb7u1vulnerable
Debianicedove724.5.0-1vulnerable
Debianicedove724.5.0-1~deb7u1vulnerable
Debianicedove724.5.0-2vulnerable
Debianicedove724.6.0-1~deb7u1vulnerable
Debianicedove724.7.0-1~deb7u1vulnerable
Debianicedove724.8.0-1~deb7u1vulnerable
Debianicedove724.8.1-1~deb7u1vulnerable
Debianicedove730.0~b1-1vulnerable
Debianicedove731.0-1vulnerable
Debianicedove731.0-2vulnerable
Debianicedove731.0-3vulnerable
Debianicedove731.0~b1-2vulnerable
Debianicedove731.0~b2-1vulnerable
Debianicedove731.1.2-1vulnerable
Debianicedove731.2.0-1vulnerable
Debianicedove731.2.0-1~deb7u1vulnerable
Debianicedove731.3.0-1vulnerable
Debianicedove731.3.0-1+powerpcspe1vulnerable
Debianicedove731.3.0-1~deb7u1vulnerable
Debianicedove731.4.0-1vulnerable
Debianicedove731.4.0-1~deb7u1vulnerable
Debianicedove731.4.0-2vulnerable
Debianicedove731.5.0-1vulnerable
Debianicedove731.5.0-1~deb7u1vulnerable
Debianicedove731.6.0-1vulnerable
Debianicedove731.6.0-1~deb7u1vulnerable
Debianicedove731.7.0-1~deb7u1fixed
Debianicedove831.6.0-1vulnerable
Debianicedove831.7.0-1~deb7u1vulnerable
Debianicedove831.7.0-1~deb8u1fixed
Debiangst-plugins-bad0.1080.10.23-7.4vulnerable
Debiangst-plugins-bad0.1080.10.23-7.4+deb8u1vulnerable
Debiangst-plugins-bad0.1080.10.23-7.4+deb8u2vulnerable
Debiangst-plugins-bad0.1080.10.23-7.4+deb8u3fixed
Debiangst-plugins-bad0.1070.10.23-7.1vulnerable
Debiangst-plugins-bad0.1070.10.23-7.1+deb7u1vulnerable
Debiangst-plugins-bad0.1070.10.23-7.1+deb7u2fixed
SuseMozillaFirefoxlinux enterprise desktop 1231.7.0esr-34.1fixed
SuseMozillaFirefoxlinux enterprise software development kit 1231.7.0esr-34.1fixed
SuseMozillaFirefoxlinux enterprise server 1231.7.0esr-34.1fixed
SuseMozillaFirefoxlinux enterprise server for sap applications 1231.7.0esr-34.1fixed
Susegstreamer-0_10-plugins-badlinux enterprise desktop 120.10.23-17.1fixed
Susegstreamer-0_10-plugins-badlinux enterprise software development kit 120.10.23-17.1fixed
Susegstreamer-0_10-plugins-badlinux enterprise workstation extension 120.10.23-17.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntugst-plugins-bad0.10deb14.040.10.23-7.2ubuntu1.1Not reportedUBUNTU-CVE-2015-0797Not reported
Debianiceweaseldeb731.7.0esr-1~deb7u1Not reportedDSA-3260-1Not reported
Debianiceweaseldeb831.7.0esr-1~deb8u1Not reportedDSA-3260-1Not reported
Debianicedovedeb731.7.0-1~deb7u1Not reportedDSA-3264-1Not reported
Debianicedovedeb831.7.0-1~deb8u1Not reportedDSA-3264-1Not reported
Debiangst-plugins-bad0.10deb80.10.23-7.4+deb8u3Not reportedDLA-2164-1Not reported
Debiangst-plugins-bad0.10deb70.10.23-7.1+deb7u2Not reportedDSA-3225-1Not reported
SuseMozillaFirefoxrpmlinux enterprise desktop 1231.7.0esr-34.1Not reportedSUSE-SU-2015:0960-1Not reported
SuseMozillaFirefoxrpmlinux enterprise software development kit 1231.7.0esr-34.1Not reportedSUSE-SU-2015:0960-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 1231.7.0esr-34.1Not reportedSUSE-SU-2015:0960-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server for sap applications 1231.7.0esr-34.1Not reportedSUSE-SU-2015:0960-1Not reported
Susegstreamer-0_10-plugins-badrpmlinux enterprise desktop 120.10.23-17.1Not reportedSUSE-SU-2015:0942-1Not reported
Susegstreamer-0_10-plugins-badrpmlinux enterprise software development kit 120.10.23-17.1Not reportedSUSE-SU-2015:0942-1Not reported
Susegstreamer-0_10-plugins-badrpmlinux enterprise workstation extension 120.10.23-17.1Not reportedSUSE-SU-2015:0942-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]