PT-2009-6184 · Mozilla · Firefox

Joe Drew · Published 2009-11-19 · Updated 2009-11-19 · CVE-2009-3978

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.5.5

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via an animated GIF file with a large image size.

Recommendations For versions prior to 3.5.5, update to version 3.5.5 or later to resolve the issue.

Fix

Related Identifiers

CVE-2009-3978

Affected Products

Firefox

References · 6

• http://h-online.com/open/news/item/Mozilla-fixes-critical-bugs-with-Firefox-3-5-5-852070.html · Patch
• http://mozilla.com/en-US/firefox/3.5.5/releasenotes · Patch
• https://wiki.mozilla.org/Releases/Firefox_3.5.5/Test_Plan · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-3978 · Security Note
• http://hg.mozilla.org/releases/mozilla-1.9.1/rev/edf189567edc · Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=525326 · Note