CVE-2009-3378

The CVE-2009-3378 entry concerns the oggplay_data_handle_theora_frame function in liboggplay (used by Mozilla Firefox 3.5.x). The vulnerability arises when a decoding error for the first frame occurs, causing the code to reuse an earlier frame data structure. This can allow a remote attacker to t...

Upgrade media libraries to fix memory safety bugs — Mozilla

Mozilla upgraded several third party libraries used in media rendering to address multiple memory safety and stability bugs identified by members of the Mozilla community. Some of the bugs discovered could potentially be used by an attacker to crash a victim's browser and execute arbitrary code o...