Bug 1220600 (CVE-2015-0797) - CVE-2015-0797 Mozilla: Buffer overflow parsing H.264 video with Linux Gstreamer (MFSA 2015-47)
Summary: CVE-2015-0797 Mozilla: Buffer overflow parsing H.264 video with Linux Gstream...
Alias: CVE-2015-0797
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
Depends On:
Blocks: Embargoed1209788
TreeView+ depends on / blocked
Reported: 2015-05-12 01:11 UTC by Huzaifa S. Sidhpurwala
Modified: 2023-05-12 08:37 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2015-05-15 08:43:45 UTC

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2015:0988 0 normal SHIPPED_LIVE Critical: firefox security update 2015-05-12 22:49:54 UTC

Description Huzaifa S. Sidhpurwala 2015-05-12 01:11:25 UTC
Security researcher Aki Helin used the Address Sanitizer tool to find a buffer overflow during video playback on Linux systems. This was due to a problem in older versions of the Gstreamer plugin during the parsing of H.264 formatted video. This issue could be used to induce a possibly exploitable crash.

This issue does not affect the current 1.0 version of Gstreamer and does not affect Windows or OS X systems. 

External Reference:



Red Hat would like to thank the Mozilla project for reporting this issue. Upstream acknowledges Aki Helin as the original reporter.

Comment 1 errata-xmlrpc 2015-05-12 18:50:36 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 6
  Red Hat Enterprise Linux 7
  Red Hat Enterprise Linux 5

Via RHSA-2015:0988 https://rhn.redhat.com/errata/RHSA-2015-0988.html

Comment 3 Huzaifa S. Sidhpurwala 2015-05-15 08:43:45 UTC
Firefox addresses this issue by blacklisting the affected H.264 video plugin. So even if target system has a vulnerable version of Gstreamer plugin, this issue cannot be exploited remotely by using malicious web content via firefox.

The corresponding gstreamer bug for this issue is:

Note You need to log in before you can comment on or make changes to this bug.