CVE-2009-3389

2009-12-1500:00:00

ubuntu.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.075 Low

EPSS

Percentile

94.0%

JSON

Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in
Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote
attackers to cause a denial of service (application crash) or possibly
execute arbitrary code via a video with large dimensions.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchseamonkey< 2.0.8+build1+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu9.04noarchseamonkey< 2.0.8+build1+nobinonly-0ubuntu0.9.04.1UNKNOWN
ubuntu9.10noarchseamonkey< 2.0.8+build1+nobinonly-0ubuntu0.9.10.1UNKNOWN
ubuntu10.04noarchseamonkey< 2.0.8+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu9.04noarchxulrunner-1.9.1< 1.9.1.6+nobinonly-0ubuntu0.9.04.1UNKNOWN
ubuntu9.10noarchxulrunner-1.9.1< 1.9.1.6+nobinonly-0ubuntu0.9.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	seamonkey	< 2.0.8+build1+nobinonly-0ubuntu0.8.04.1	UNKNOWN
ubuntu	9.04	noarch	seamonkey	< 2.0.8+build1+nobinonly-0ubuntu0.9.04.1	UNKNOWN
ubuntu	9.10	noarch	seamonkey	< 2.0.8+build1+nobinonly-0ubuntu0.9.10.1	UNKNOWN
ubuntu	10.04	noarch	seamonkey	< 2.0.8+build1+nobinonly-0ubuntu0.10.04.1	UNKNOWN
ubuntu	9.04	noarch	xulrunner-1.9.1	< 1.9.1.6+nobinonly-0ubuntu0.9.04.1	UNKNOWN
ubuntu	9.10	noarch	xulrunner-1.9.1	< 1.9.1.6+nobinonly-0ubuntu0.9.10.1	UNKNOWN