The oggplay_data_handle_theora_frame function in media/liboggplay/src/liboggplay/oggplay_data.c in liboggplay, as used in Mozilla Firefox 3.5.x before 3.5.4, attempts to reuse an earlier frame data structure upon encountering a decoding error for the first frame, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a crafted .ogg video file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade liboggplay | Jul 30, 2024 | Oct 29, 2009 |
| Freebsd | — | Upgrade firefoxUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Oct 28, 2009 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss. | Oct 30, 2017 | Oct 29, 2009 |
| Mfsa2009 63 | — | Upgrade to Mozilla Firefox version 3.5.4 | Jun 14, 2012 | Oct 29, 2009 |
| Suse | — | Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nssUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner192-translationsUpgrade orbit2-x86Upgrade orbit2Upgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade gconf2-32bitUpgrade mozilla-xulrunner192-x86Upgrade gconf2Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-translations-otherUpgrade libidl-x86Upgrade libidl-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-nsprUpgrade libfreebl3Upgrade libfreebl3-x86Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-nss-x86Upgrade gconf2-x86Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner190-x86Upgrade MozillaFirefoxUpgrade MozillaFirefox-translationsUpgrade libfreebl3-32bitUpgrade orbit2-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-nspr-x86Upgrade libidlUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner191 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade xulrunner-1.9.1 | Nov 19, 2024 | Oct 29, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub