PT-2009-5685 · Mozilla+1 · Firefox+1

Juan Becerra + 1 · Publicado 2009-10-29 · Atualizado 2024-06-15 · CVE-2009-3378

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions liboggplay versions prior to 3.5.4 Mozilla Firefox versions 3.5.x before 3.5.4

Description The issue is related to the oggplay data handle theora frame function in liboggplay, which can cause a denial of service or possibly execute arbitrary code when encountering a decoding error for the first frame in a crafted .ogg video file. This is due to the function attempting to reuse an earlier frame data structure, leading to a NULL pointer dereference and application crash.

Recommendations For liboggplay versions prior to 3.5.4, update to version 3.5.4 or later to resolve the issue. For Mozilla Firefox versions 3.5.x before 3.5.4, update to version 3.5.4 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2009-3378

OPENSUSE-SU-2024:10071-1

Produtos afetados

Firefox

Liboggplay

Referências · 910

• https://suse.com/security/cve/CVE-2012-2808 · Nota
• https://suse.com/security/cve/CVE-2012-0444 · Nota
• https://suse.com/security/cve/CVE-2012-1954 · Nota
• https://suse.com/security/cve/CVE-2013-1714 · Nota
• https://suse.com/security/cve/CVE-2011-0068 · Nota
• https://suse.com/security/cve/CVE-2010-0167 · Nota
• https://suse.com/security/cve/CVE-2015-0806 · Nota
• https://suse.com/security/cve/CVE-2012-4192 · Nota
• https://suse.com/security/cve/CVE-2016-1976 · Nota
• https://suse.com/security/cve/CVE-2013-0770 · Nota
• https://suse.com/security/cve/CVE-2015-0799 · Nota
• https://suse.com/security/cve/CVE-2016-5275 · Nota
• https://suse.com/security/cve/CVE-2015-2724 · Nota
• https://suse.com/security/cve/CVE-2012-1973 · Nota
• https://suse.com/security/cve/CVE-2016-2821 · Nota