Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-3379
HistoryOct 29, 2009 - 12:00 a.m.

CVE-2009-3379

2009-10-2900:00:00
ubuntu.com
ubuntu.com
16

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.254 Low

EPSS

Percentile

96.6%

Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla
Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of
service (application crash) or possibly execute arbitrary code via unknown
vectors. NOTE: this might overlap CVE-2009-2663.

Bugs

Notes

Author Note
mdeslaur libvorbis: need to also fix a second regression for CVE-2008-1420
OSVersionArchitecturePackageVersionFilename
ubuntu9.04noarchxulrunner-1.9.1< 1.9.1.9+nobinonly-0ubuntu0.9.04.1UNKNOWN
ubuntu9.10noarchxulrunner-1.9.1< 1.9.1.9+nobinonly-0ubuntu0.9.10.1UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.254 Low

EPSS

Percentile

96.6%