Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2009-3389

Overview

Vulnerability Score 9.3 9.3
CVE Id CVE-2009-3389
Last Modified 21 Aug 2010 01:35:44
Published 17 Dec 2009 12:30:00
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2009-3389

Summary

Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions.

Vulnerable Systems

Application

  • Mozilla Firefox 3.5.1

  • Mozilla Firefox 3.5.2

  • Mozilla Firefox 3.5.3

  • Mozilla Firefox 3.5.4

  • Mozilla Firefox 3.5.5

  • Mozilla Seamonkey 1.0

  • Mozilla Seamonkey 1.0.1

  • Mozilla Seamonkey 1.0.2

  • Mozilla Seamonkey 1.0.3

  • Mozilla Seamonkey 1.0.4

  • Mozilla Seamonkey 1.0.5

  • Mozilla Seamonkey 1.0.6

  • Mozilla Seamonkey 1.0.7

  • Mozilla Seamonkey 1.0.8

  • Mozilla Seamonkey 1.0.9

  • Mozilla Seamonkey 1.0.99

  • Mozilla Seamonkey 1.1

  • Mozilla Seamonkey 1.1.1

  • Mozilla Seamonkey 1.1.10

  • Mozilla Seamonkey 1.1.11

  • Mozilla Seamonkey 1.1.12

  • Mozilla Seamonkey 1.1.13

  • Mozilla Seamonkey 1.1.14

  • Mozilla Seamonkey 1.1.15

  • Mozilla Seamonkey 1.1.16

  • Mozilla Seamonkey 1.1.17

  • Mozilla Seamonkey 1.1.2

  • Mozilla Seamonkey 1.1.3

  • Mozilla Seamonkey 1.1.4

  • Mozilla Seamonkey 1.1.5

  • Mozilla Seamonkey 1.1.6

  • Mozilla Seamonkey 1.1.7

  • Mozilla Seamonkey 1.1.8

  • Mozilla Seamonkey 1.1.9

  • Mozilla Seamonkey 1.5.0.10

  • Mozilla Seamonkey 1.5.0.8

  • Mozilla Seamonkey 1.5.0.9

  • Mozilla Seamonkey 2.0

  • Mozilla Seamonkey 2.0a1

  • Mozilla Seamonkey 2.0a1pre


References

VUPEN - ADV-2009-3547

CONFIRM - http://www.mozilla.org/security/announce/2009/mfsa2009-67.html

FEDORA - FEDORA-2009-13366

FEDORA - FEDORA-2009-13362

FEDORA - FEDORA-2009-13333

CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=515882

CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=504613

XF - mozilla-theora-bo(54805)

UBUNTU - USN-874-1

MISC - http://www.theora.org/news/#libtheora-1.1.0

BID - 37368

BID - 37349

SUSE - SUSE-SA:2009:063

MANDRIVA - MDVSA-2010:043

SECUNIA - 39317

SECUNIA - 37881

SECUNIA - 37856

SECUNIA - 37785

SECUNIA - 37699

SUSE - SUSE-SR:2010:013

SUSE - SUSE-SR:2010:008


Last Updated: 27 May 2016 10:51:15