CVE-2009-3389

Published: Dec 17, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions.

Affected (51)

Products: Mozilla: Firefox, Seamonkey

2 products

Configuration A

51 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 3.5.1
Mozilla Firefox	Version 3.5.2
Mozilla Firefox	Version 3.5.3
Mozilla Firefox	Version 3.5.4
Mozilla Firefox	Version 3.5.5
Mozilla Seamonkey	Up to 2.0
Mozilla Seamonkey	Version 1.0.1
Mozilla Seamonkey	Version 1.0.2
Mozilla Seamonkey	Version 1.0.3
Mozilla Seamonkey	Version 1.0.4
Mozilla Seamonkey	Version 1.0.5
Mozilla Seamonkey	Version 1.0.6
Mozilla Seamonkey	Version 1.0.7
Mozilla Seamonkey	Version 1.0.8
Mozilla Seamonkey	Version 1.0.99
Mozilla Seamonkey	Version 1.0.9
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0 alpha
Mozilla Seamonkey	Version 1.0 beta
Mozilla Seamonkey	Version 1.1.10
Mozilla Seamonkey	Version 1.1.11
Mozilla Seamonkey	Version 1.1.12
Mozilla Seamonkey	Version 1.1.13
Mozilla Seamonkey	Version 1.1.14
Mozilla Seamonkey	Version 1.1.15
Mozilla Seamonkey	Version 1.1.16
Mozilla Seamonkey	Version 1.1.17
Mozilla Seamonkey	Version 1.1.1
Mozilla Seamonkey	Version 1.1.2
Mozilla Seamonkey	Version 1.1.3
Mozilla Seamonkey	Version 1.1.4
Mozilla Seamonkey	Version 1.1.5
Mozilla Seamonkey	Version 1.1.6
Mozilla Seamonkey	Version 1.1.7
Mozilla Seamonkey	Version 1.1.8
Mozilla Seamonkey	Version 1.1.9
Mozilla Seamonkey	Version 1.1
Mozilla Seamonkey	Version 1.1 alpha
Mozilla Seamonkey	Version 1.1 beta
Mozilla Seamonkey	Version 1.5.0.10
Mozilla Seamonkey	Version 1.5.0.8
Mozilla Seamonkey	Version 1.5.0.9
Mozilla Seamonkey	Version 2.0
Mozilla Seamonkey	Version 2.0 alpha_1
Mozilla Seamonkey	Version 2.0 alpha_2
Mozilla Seamonkey	Version 2.0 alpha_3
Mozilla Seamonkey	Version 2.0 beta_1
Mozilla Seamonkey	Version 2.0 beta_2
Mozilla Seamonkey	Version 2.0 rc1
Mozilla Seamonkey	Version 2.0a1
Mozilla Seamonkey	Version 2.0a1pre

Related CWEs

References (44)

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

Source: cve@mitre.org

http://secunia.com/advisories/37699

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/37785

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/37856

Source: cve@mitre.org

http://secunia.com/advisories/37881

Source: cve@mitre.org

http://secunia.com/advisories/39317

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2010:043

Source: cve@mitre.org

http://www.mozilla.org/security/announce/2009/mfsa2009-67.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2009_63_firefox.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/37349

Source: cve@mitre.org

http://www.securityfocus.com/bid/37368

Source: cve@mitre.org

http://www.theora.org/news/#libtheora-1.1.0

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-874-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/3547

Source: cve@mitre.org

PatchVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=504613

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=515882

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/54805

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7967

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/37699

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/37785

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/37856

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/37881

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/39317

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2010:043

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/2009/mfsa2009-67.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2009_63_firefox.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/37349

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/37368

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.theora.org/news/#libtheora-1.1.0

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-874-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/3547

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=504613

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=515882

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/54805

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7967

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.