← Back

CVE-2009-3978

nvd nist
Published: Nov 19, 2009Modified: Apr 23, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:N/A:P
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an animated GIF file with a large image size, a different vulnerability than CVE-2009-3373.

Affected (70)

Products: Mozilla: Firefox
1 product
Firefox
Configuration A
70 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Up to 3.5.4
Version 0.10.1
Version 0.10
Version 0.1
Version 0.2
Version 0.3
Version 0.4
Version 0.5
Version 0.6.1
Version 0.6
Version 0.7.1
Version 0.7
Version 0.8
Version 0.9.1
Version 0.9.2
Version 0.9.3
Version 0.9
Version 0.9 rc
Version 1.0.1
Version 1.0.2
Version 1.0.3
Version 1.0.4
Version 1.0.5
Version 1.0.6
Version 1.0.7
Version 1.0.8
Version 1.0
Version 1.0 preview_release
Version 1.4.1
Version 1.5.0.10
Version 1.5.0.11
Version 1.5.0.12
Version 1.5.0.1
Version 1.5.0.2
Version 1.5.0.3
Version 1.5.0.4
Version 1.5.0.5
Version 1.5.0.6
Version 1.5.0.7
Version 1.5.0.8
Version 1.5.0.9
Version 1.5.1
Version 1.5.2
Version 1.5.3
Version 1.5.4
Version 1.5.5
Version 1.5.6
Version 1.5.7
Version 1.5.8
Version 1.5
Version 1.5 beta1
Version 1.5 beta2
Version 1.8
Version 2.0.0.10
Version 2.0.0.11
Version 2.0.0.1
Version 2.0.0.2
Version 2.0.0.3
Version 2.0.0.4
Version 2.0.0.5
Version 2.0.0.6
Version 2.0.0.7
Version 2.0.0.8
Version 2.0.0.9
Version 2.0
Version 3.0.5
Version 3.0
Version 3.5.2
Version 3.5.3
Version 3.5

Timeline

No history available yet.