PT-2015-4882
CVE-2015-0797
·
تاريخ النشر
2015-04-15
·
تاريخ التحديث
2024-10-22
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
GStreamer versions prior to 1.4.5
Mozilla Firefox versions prior to 38.0
Firefox ESR 31.x versions prior to 31.7
Thunderbird versions prior to 31.7
Description
The issue allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.
Recommendations
For GStreamer versions prior to 1.4.5, update to version 1.4.5 or later.
For Mozilla Firefox versions prior to 38.0, update to version 38.0 or later.
For Firefox ESR 31.x versions prior to 31.7, update to version 31.7 or later.
For Thunderbird versions prior to 31.7, update to version 31.7 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾