Lucene search
Ubuntu.comUB:CVE-2009-3379HistoryOct 29, 2009 - 12:00 a.m.
CVE-2009-3379
2009-10-2900:00:00
ubuntu.com
ubuntu.com
18
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.292 Low
EPSS
Percentile
96.9%
Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla
Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of
service (application crash) or possibly execute arbitrary code via unknown
vectors. NOTE: this might overlap CVE-2009-2663.
Bugs
- <https://bugzilla.mozilla.org/show_bug.cgi?id=499512>
- <https://bugzilla.mozilla.org/show_bug.cgi?id=500254>
- <https://bugzilla.mozilla.org/show_bug.cgi?id=501279>
- <https://bugzilla.mozilla.org/show_bug.cgi?id=507167>
- <https://bugzilla.mozilla.org/show_bug.cgi?id=515889>
- <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3379>
Notes
| Author | Note |
|---|---|
| mdeslaur | libvorbis: need to also fix a second regression for CVE-2008-1420 |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 9.04 | noarch | xulrunner-1.9.1 | < 1.9.1.9+nobinonly-0ubuntu0.9.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | xulrunner-1.9.1 | < 1.9.1.9+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
Related
openvas
openvas
FreeBSD Ports: libvorbis
2009-12-03 00:00:00
FreeBSD Ports: libvorbis
2009-12-03 00:00:00
Fedora Core 11 FEDORA-2009-11243 (libvorbis)
2009-11-17 00:00:00
freebsd
freebsd
libvorbis -- multiple vulnerabilities
2009-11-24 00:00:00
libvorbis -- various security issues
2008-05-14 00:00:00
libtremor -- multiple vulnerabilities
2008-03-19 00:00:00
prion
prion
Code injection
2009-10-29 14:30:00
Integer overflow
2008-05-16 12:54:00
Memory corruption
2009-08-04 16:30:00
nessus
nessus
FreeBSD : libvorbis -- multiple vulnerabilities (94edff42-d93d-11de-a434-0211d880e350)
2009-11-25 00:00:00
Ubuntu 8.04 LTS / 8.10 / 9.04 : libvorbis vulnerability (USN-825-1)
2009-08-25 00:00:00
Debian DSA-1939-1 : libvorbis - several vulnerabilities
2010-02-24 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: libvorbis-1.2.0-7.fc10
2009-11-10 17:43:32
[SECURITY] Fedora 11 Update: libvorbis-1.2.0-9.fc11
2009-11-10 17:52:37
[SECURITY] Fedora 10 Update: libvorbis-1.2.0-6.fc10
2009-08-10 21:50:41
cve
cve
securityvulns
securityvulns
[USN-825-1] libvorbis vulnerability
2009-08-25 00:00:00
libvorbis multiple security vulnerabilities
2009-08-25 00:00:00
libvorbis library multiple security vulnerabilities
2009-11-25 00:00:00
debian
debian
[SECURITY] [DSA 1939-1] New libvorbis packages fix several vulnerabilities
2009-11-24 22:41:13
[SECURITY] [DSA 1591-1] New libvorbis packages fix several vulnerabilities
2008-06-03 09:27:35
nvd
nvd
debiancve
debiancve
cvelist
cvelist
ubuntu
ubuntu
libvorbis vulnerability
2009-08-24 00:00:00
libvorbis vulnerabilities
2009-11-24 00:00:00
libvorbis vulnerabilities
2008-12-01 00:00:00
redhat
redhat
(RHSA-2009:1561) Important: libvorbis security update
2009-11-09 00:00:00
(RHSA-2009:1219) Important: libvorbis security update
2009-08-18 00:00:00
(RHSA-2008:0270) Important: libvorbis security update
2008-05-14 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:42:52
Arbitrary Code Execution
2020-04-10 00:23:05
Arbitrary Code Execution
2020-04-10 00:35:42
oraclelinux
oraclelinux
libvorbis security update
2009-11-09 00:00:00
libvorbis security update
2009-08-18 00:00:00
libvorbis security update
2008-05-14 00:00:00
centos
centos
libvorbis security update
2009-11-09 18:11:44
libvorbis security update
2009-08-18 19:17:02
libvorbis security update
2008-05-14 12:52:45
mozilla
mozilla
Upgrade media libraries to fix memory safety bugs — Mozilla
2009-10-27 00:00:00
Crashes with evidence of memory corruption (rv:1.9.1.2/1.9.0.13) — Mozilla
2009-08-03 00:00:00
ubuntucve
ubuntucve
CVE-2008-1420
2008-05-16 00:00:00
CVE-2009-2663
2009-08-04 00:00:00
gentoo
gentoo
libvorbis: User-assisted execution of arbitrary code
2009-09-07 00:00:00
libvorbis: Multiple vulnerabilities
2008-06-23 00:00:00
seebug
seebug
libvorbis多个缓冲区溢出漏洞
2008-05-17 00:00:00
Mozilla Firefox多个内存破坏漏洞
2009-11-03 00:00:00
osv
osv
libvorbis - several vulnerabilities
2008-06-03 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-11-04 14:24:35
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.292 Low
EPSS
Percentile
96.9%
Related for UB:CVE-2009-3379