Mozilla Foundation Security Advisory 2009-67

Mozilla Foundation Security Advisory 2009-67 Title: Integer overflow, crash in libtheora video library Impact: Critical Announced: December 15, 2009 Reporter: Dan Kaminsky, David Keeler Products: Firefox, SeaMonkey Fixed in: Firefox 3.5.6 SeaMonkey 2.0.1 Description Security researcher Dan Kamins...

CVE-2009-3389

Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a video with large dimensions...