Lucene search

K
mozillaMozilla FoundationMFSA2009-56
HistoryOct 27, 2009 - 12:00 a.m.

Heap buffer overflow in GIF color map parser — Mozilla

2009-10-2700:00:00
Mozilla Foundation
www.mozilla.org
12

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.322 Low

EPSS

Percentile

97.0%

Security research firm iDefense reported that researcher regenrecht discovered a heap-based buffer overflow in Mozilla’s GIF image parser. This vulnerability could potentially be used by an attacker to crash a victim’s browser and run arbitrary code on their computer.

CPENameOperatorVersion
firefoxlt3.0.15
firefoxlt3.5.4
seamonkeylt2

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.322 Low

EPSS

Percentile

97.0%