Lucene search

MitreCVE-2009-3389

HistoryDec 17, 2009 - 5:30 p.m.

CVE-2009-3389

2009-12-1717:30:00

CWE-189

mitre

web.nvd.nist.gov

cve-2009-3389

integer overflow

libtheora

denial of service

nvd

security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

Confidence

High

EPSS

0.09

Percentile

94.6%

JSON

Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions.

Affected configurations

Nvd

Node

mozillafirefoxMatch3.5.1

mozillafirefoxMatch3.5.2

mozillafirefoxMatch3.5.3

mozillafirefoxMatch3.5.4

mozillafirefoxMatch3.5.5

mozillaseamonkeyRange≤2.0rc2

mozillaseamonkeyMatch1.0

mozillaseamonkeyMatch1.0alpha

mozillaseamonkeyMatch1.0beta

mozillaseamonkeyMatch1.0.1

mozillaseamonkeyMatch1.0.2

mozillaseamonkeyMatch1.0.3

mozillaseamonkeyMatch1.0.4

mozillaseamonkeyMatch1.0.5

mozillaseamonkeyMatch1.0.6

mozillaseamonkeyMatch1.0.7

mozillaseamonkeyMatch1.0.8

mozillaseamonkeyMatch1.0.9

mozillaseamonkeyMatch1.0.99

mozillaseamonkeyMatch1.1

mozillaseamonkeyMatch1.1alpha

mozillaseamonkeyMatch1.1beta

mozillaseamonkeyMatch1.1.1

mozillaseamonkeyMatch1.1.2

mozillaseamonkeyMatch1.1.3

mozillaseamonkeyMatch1.1.4

mozillaseamonkeyMatch1.1.5

mozillaseamonkeyMatch1.1.6

mozillaseamonkeyMatch1.1.7

mozillaseamonkeyMatch1.1.8

mozillaseamonkeyMatch1.1.9

mozillaseamonkeyMatch1.1.10

mozillaseamonkeyMatch1.1.11

mozillaseamonkeyMatch1.1.12

mozillaseamonkeyMatch1.1.13

mozillaseamonkeyMatch1.1.14

mozillaseamonkeyMatch1.1.15

mozillaseamonkeyMatch1.1.16

mozillaseamonkeyMatch1.1.17

mozillaseamonkeyMatch1.5.0.8

mozillaseamonkeyMatch1.5.0.9

mozillaseamonkeyMatch1.5.0.10

mozillaseamonkeyMatch2.0

mozillaseamonkeyMatch2.0alpha_1

mozillaseamonkeyMatch2.0alpha_2

mozillaseamonkeyMatch2.0alpha_3

mozillaseamonkeyMatch2.0beta_1

mozillaseamonkeyMatch2.0beta_2

mozillaseamonkeyMatch2.0rc1

mozillaseamonkeyMatch2.0a1pre

VendorProductVersionCPE
mozillafirefox3.5.1cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*
mozillafirefox3.5.2cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*
mozillafirefox3.5.3cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*
mozillafirefox3.5.4cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*
mozillafirefox3.5.5cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*
mozillaseamonkey*cpe:2.3:a:mozilla:seamonkey:*:rc2:*:*:*:*:*:*
mozillaseamonkey1.0cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*
mozillaseamonkey1.0cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*
mozillaseamonkey1.0cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*
mozillaseamonkey1.0.1cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	firefox	3.5.1	cpe:2.3:a:mozilla:firefox:3.5.1:::::::*
mozilla	firefox	3.5.2	cpe:2.3:a:mozilla:firefox:3.5.2:::::::*
mozilla	firefox	3.5.3	cpe:2.3:a:mozilla:firefox:3.5.3:::::::*
mozilla	firefox	3.5.4	cpe:2.3:a:mozilla:firefox:3.5.4:::::::*
mozilla	firefox	3.5.5	cpe:2.3:a:mozilla:firefox:3.5.5:::::::*
mozilla	seamonkey	*	cpe:2.3:a:mozilla:seamonkey::rc2::::::*
mozilla	seamonkey	1.0	cpe:2.3:a:mozilla:seamonkey:1.0:::::::*
mozilla	seamonkey	1.0	cpe:2.3:a:mozilla:seamonkey:1.0:alpha::::::
mozilla	seamonkey	1.0	cpe:2.3:a:mozilla:seamonkey:1.0:beta::::::
mozilla	seamonkey	1.0.1	cpe:2.3:a:mozilla:seamonkey:1.0.1:::::::*