PT-2009-6184 · Mozilla · Firefox

Joe Drew · Publicado 2009-11-19 · Atualizado 2009-11-19 · CVE-2009-3978

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.5.5

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via an animated GIF file with a large image size.

Recommendations For versions prior to 3.5.5, update to version 3.5.5 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2009-3978

Produtos afetados

Firefox

Referências · 6

• http://h-online.com/open/news/item/Mozilla-fixes-critical-bugs-with-Firefox-3-5-5-852070.html · Correção
• http://hg.mozilla.org/releases/mozilla-1.9.1/rev/edf189567edc · Nota
• http://mozilla.com/en-US/firefox/3.5.5/releasenotes · Correção
• https://wiki.mozilla.org/Releases/Firefox_3.5.5/Test_Plan · Correção
• https://bugzilla.mozilla.org/show_bug.cgi?id=525326 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3978 · Nota de Segurança