CVE-2009-3978

Seamonkey: NULL pointer dereference in GIF decoder

Published Nov 19, 2009 CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Description
The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an animated GIF file with a large image size, a different vulnerability than CVE-2009-3373.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2009-3949 The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an animated GIF file with a large image size, a different vulnerability than CVE-2009-3373.
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Sep 17, 2024, 1:31 AM
Reserved
Nov 18, 2009, 12:00 AM
Status
Modified
Published
Nov 19, 2009, 12:30 AM
Modified
Jun 16, 2026, 11:12 PM
Severity
Public date
Oct 29, 2009, 12:00 AM