| Definition Id: oval:org.mitre.oval:def:6443 |
Date: 2009-11-04 |
| Title: |
The oggplay_data_handle_theora_frame in liboggplay in Mozilla Firefox 3.5.x before 3.5.4 to cuase denial of service |
| Description: |
The oggplay_data_handle_theora_frame function in media/liboggplay/src/liboggplay/oggplay_data.c in liboggplay, as used in Mozilla Firefox 3.5.x before 3.5.4, attempts to reuse an earlier frame data structure upon encountering a decoding error for the first frame, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a crafted .ogg video file. |
| Version: |
0 |
Class: |
vulnerability |
| Status: |
DRAFT |
Reference(s): |
CVE-2009-3378
|
| Family: |
windows |
| Platform(s): |
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows 7 |
Product(s): |
Mozilla Firefox |
| Definition Synopsis: |
|
|
