CVE-2009-3373

HIGH

Description

Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.

References

http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1

http://www.mandriva.com/security/advisories?name=MDVSA-2009:294

http://www.mozilla.org/security/announce/2009/mfsa2009-56.html

http://www.vupen.com/english/advisories/2009/3334

https://bugzilla.mozilla.org/show_bug.cgi?id=511689

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10684

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6548

Details

Source: MITRE

Published: 2009-10-29

Updated: 2018-10-30

Type: CWE-119

Risk Information

CVSS v2.0

Base Score: 10

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 10

Severity: HIGH