NVD

Id
50593  
Name
CVE-2009-3389  
Description
Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-12-17  
Modified Date
2010-08-21  
Seq
2009-3389  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
255836 50593 CVE-2009-3389 SUSE-SR:2010:008  View
255837 50593 CVE-2009-3389 SUSE-SR:2010:013  View
255838 50593 CVE-2009-3389 oval:org.mitre.oval:def:7967  View
255839 50593 CVE-2009-3389 MDVSA-2010:043  View
255840 50593 CVE-2009-3389 http://www.mozilla.org/security/announce/2009/mfsa2009-67.html  View
255841 50593 CVE-2009-3389 SUSE-SA:2009:063  View
255842 50593 CVE-2009-3389 37349  View
255843 50593 CVE-2009-3389 37368  View
255844 50593 CVE-2009-3389 http://www.theora.org/news/#libtheora-1.1.0  View
255845 50593 CVE-2009-3389 USN-874-1  View
255846 50593 CVE-2009-3389 ADV-2009-3547  View
255847 50593 CVE-2009-3389 mozilla-theora-bo(54805)  View
255848 50593 CVE-2009-3389 https://bugzilla.mozilla.org/show_bug.cgi?id=504613  View
255849 50593 CVE-2009-3389 https://bugzilla.mozilla.org/show_bug.cgi?id=515882  View
255850 50593 CVE-2009-3389 FEDORA-2009-13333  View
255851 50593 CVE-2009-3389 FEDORA-2009-13362  View
255852 50593 CVE-2009-3389 FEDORA-2009-13366  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41452 JVNDB-2009-002459 複数の Mozilla 製品の libtheora における任意のコードを実行される脆弱性 複数の Mozilla 製品で使用されている Xiph.Org Theora の libtheora には、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-3389 40820 CVE-2009-3389 50593 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002459.html 2009-12-15 2010-01-28 View