CVE-2009-3389
Fixed in a distro release EPSS 5%
Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions.
Products: mozilla firefox, mozilla seamonkey
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libtheora | 1.1 |
| Debian 13 | libtheora | 1.1 |
| Debian 14 | libtheora | 1.1 |
| Debian 5.0 | libtheora | 1.0~beta3-1+lenny1 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |