Bug 547292 (CVE-2009-3978) - CVE-2009-3978 Firefox, Seamonkey: NULL pointer dereference in GIF decoder
Summary: CVE-2009-3978 Firefox, Seamonkey: NULL pointer dereference in GIF decoder
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: CVE-2009-3978
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL: https://bugzilla.mozilla.org/show_bug...
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-12-14 09:48 UTC by Jan Lieskovsky
Modified: 2019-09-29 12:33 UTC (History)
2 users (show)

Fixed In Version: firefox 3.0.16
Clone Of:
Environment:
Last Closed: 2012-02-21 09:31:40 UTC
Embargoed:

Attachments (Terms of Use)

Description Jan Lieskovsky 2009-12-14 09:48:11 UTC 
Common Vulnerabilities and Exposures assigned an identifier CVE-2009-3978  to
the following vulnerability:

The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp
in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to
cause a denial of service (NULL pointer dereference and application crash)
via an animated GIF file with a large image size, a different vulnerability
than CVE-2009-3373.

Upstream bug report:
--------------------
https://bugzilla.mozilla.org/show_bug.cgi?id=525326

Upstream patch:
---------------
http://hg.mozilla.org/releases/mozilla-1.9.1/rev/edf189567edc
Comment 1 Jan Lieskovsky 2009-12-14 10:00:05 UTC 
This issue does NOT affect the versions of the seamonkey package, as shipped
with Red Hat Enterprise Linux 3 and 4.

This issue does NOT affect the versions of the seamonkey package, as shipped
with Fedora release of 10 and 11.

This issue affects the versions of the seamonkey package, as shipped with
Fedora release of 12 and Fedora Rawhide.

Please fix.
Comment 2 Jan Lieskovsky 2009-12-14 10:02:41 UTC 
This issue affects the versions of the firefox package, as shipped with
Red Hat Enterprise Linux 4 and 5.

This issue affects the version of the firefox package, as shipped with
Fedora release of 10.

This issue does NOT affect the versions of the firefox package, as shipped
with Fedora release of 11 and 12.
Comment 3 Martin Stransky 2009-12-14 10:18:29 UTC 
It's fixed in firefox-3.0.16.
Note You need to log in before you can comment on or make changes to this bug.