CVE-2009-3388

Published: Dec 17, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context-dependent attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors, related to "memory safety issues."

Affected (51)

Products: Mozilla: Firefox, Seamonkey

2 products

Configuration A

51 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 3.5.1
Mozilla Firefox	Version 3.5.2
Mozilla Firefox	Version 3.5.3
Mozilla Firefox	Version 3.5.4
Mozilla Firefox	Version 3.5.5
Mozilla Seamonkey	Up to 2.0
Mozilla Seamonkey	Version 1.0.1
Mozilla Seamonkey	Version 1.0.2
Mozilla Seamonkey	Version 1.0.3
Mozilla Seamonkey	Version 1.0.4
Mozilla Seamonkey	Version 1.0.5
Mozilla Seamonkey	Version 1.0.6
Mozilla Seamonkey	Version 1.0.7
Mozilla Seamonkey	Version 1.0.8
Mozilla Seamonkey	Version 1.0.99
Mozilla Seamonkey	Version 1.0.9
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0 alpha
Mozilla Seamonkey	Version 1.0 beta
Mozilla Seamonkey	Version 1.1.10
Mozilla Seamonkey	Version 1.1.11
Mozilla Seamonkey	Version 1.1.12
Mozilla Seamonkey	Version 1.1.13
Mozilla Seamonkey	Version 1.1.14
Mozilla Seamonkey	Version 1.1.15
Mozilla Seamonkey	Version 1.1.16
Mozilla Seamonkey	Version 1.1.17
Mozilla Seamonkey	Version 1.1.1
Mozilla Seamonkey	Version 1.1.2
Mozilla Seamonkey	Version 1.1.3
Mozilla Seamonkey	Version 1.1.4
Mozilla Seamonkey	Version 1.1.5
Mozilla Seamonkey	Version 1.1.6
Mozilla Seamonkey	Version 1.1.7
Mozilla Seamonkey	Version 1.1.8
Mozilla Seamonkey	Version 1.1.9
Mozilla Seamonkey	Version 1.1
Mozilla Seamonkey	Version 1.1 alpha
Mozilla Seamonkey	Version 1.1 beta
Mozilla Seamonkey	Version 1.5.0.10
Mozilla Seamonkey	Version 1.5.0.8
Mozilla Seamonkey	Version 1.5.0.9
Mozilla Seamonkey	Version 2.0
Mozilla Seamonkey	Version 2.0 alpha_1
Mozilla Seamonkey	Version 2.0 alpha_2
Mozilla Seamonkey	Version 2.0 alpha_3
Mozilla Seamonkey	Version 2.0 beta_1
Mozilla Seamonkey	Version 2.0 beta_2
Mozilla Seamonkey	Version 2.0 rc1
Mozilla Seamonkey	Version 2.0a1
Mozilla Seamonkey	Version 2.0a1pre

Related CWEs

References (38)

http://secunia.com/advisories/37699

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/37785

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/37856

Source: cve@mitre.org

http://secunia.com/advisories/37881

Source: cve@mitre.org

http://securitytracker.com/id?1023335

Source: cve@mitre.org

http://securitytracker.com/id?1023336

Source: cve@mitre.org

http://www.mozilla.org/security/announce/2009/mfsa2009-66.html

Source: cve@mitre.org

Vendor Advisory

http://www.novell.com/linux/security/advisories/2009_63_firefox.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/37349

Source: cve@mitre.org

http://www.securityfocus.com/bid/37369

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-874-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/3547

Source: cve@mitre.org

PatchVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=504843

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=523816

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/54804

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8009

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html

Source: cve@mitre.org

http://secunia.com/advisories/37699

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/37785

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/37856

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/37881

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1023335

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1023336

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/2009/mfsa2009-66.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.novell.com/linux/security/advisories/2009_63_firefox.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/37349

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/37369

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-874-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/3547

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=504843

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=523816

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/54804

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8009

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.