Lucene search

K
mozillaMozilla FoundationMFSA2009-63
HistoryOct 27, 2009 - 12:00 a.m.

Upgrade media libraries to fix memory safety bugs β€” Mozilla

2009-10-2700:00:00
Mozilla Foundation
www.mozilla.org
10

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.254 Low

EPSS

Percentile

96.7%

Mozilla upgraded several third party libraries used in media rendering to address multiple memory safety and stability bugs identified by members of the Mozilla community. Some of the bugs discovered could potentially be used by an attacker to crash a victim’s browser and execute arbitrary code on their computer. liboggz, libvorbis, and liboggplay were all upgraded to address these issues.

CPENameOperatorVersion
firefoxlt3.5.4

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.254 Low

EPSS

Percentile

96.7%