Bug 547292 – CVE-2009-3978 Firefox, Seamonkey: NULL pointer dereference in GIF decoder

Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.

Bug 547292 - (CVE-2009-3978) CVE-2009-3978 Firefox, Seamonkey: NULL pointer dereference in GIF decoder

Summary:	CVE-2009-3978 Firefox, Seamonkey: NULL pointer dereference in GIF decoder

Status:	CLOSED CURRENTRELEASE

Aliases:	CVE-2009-3978

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	low Severity low
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:	https://bugzilla.mozilla.org/show_bug...
Whiteboard:	impact=none,source=suse,reported=2009...
Keywords:	Security

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2009-12-14 04:48 EST by Jan Lieskovsky
Modified:	2016-03-04 07:54 EST (History)
CC List:	2 users (show)

See Also:
Fixed In Version:	firefox 3.0.16
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2012-02-21 04:31:40 EST
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Jan Lieskovsky 2009-12-14 04:48:11 EST

Common Vulnerabilities and Exposures assigned an identifier CVE-2009-3978  to
the following vulnerability:

The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp
in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to
cause a denial of service (NULL pointer dereference and application crash)
via an animated GIF file with a large image size, a different vulnerability
than CVE-2009-3373.

Upstream bug report:
--------------------
https://bugzilla.mozilla.org/show_bug.cgi?id=525326

Upstream patch:
---------------
http://hg.mozilla.org/releases/mozilla-1.9.1/rev/edf189567edc

Comment 1 Jan Lieskovsky 2009-12-14 05:00:05 EST

This issue does NOT affect the versions of the seamonkey package, as shipped
with Red Hat Enterprise Linux 3 and 4.

This issue does NOT affect the versions of the seamonkey package, as shipped
with Fedora release of 10 and 11.

This issue affects the versions of the seamonkey package, as shipped with
Fedora release of 12 and Fedora Rawhide.

Please fix.

Comment 2 Jan Lieskovsky 2009-12-14 05:02:41 EST

This issue affects the versions of the firefox package, as shipped with
Red Hat Enterprise Linux 4 and 5.

This issue affects the version of the firefox package, as shipped with
Fedora release of 10.

This issue does NOT affect the versions of the firefox package, as shipped
with Fedora release of 11 and 12.

Comment 3 Martin Stransky 2009-12-14 05:18:29 EST

It's fixed in firefox-3.0.16.

Note You need to log in before you can comment on or make changes to this bug.