Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libtheora | Jul 30, 2024 | Dec 17, 2009 |
| Freebsd | — | Upgrade linux-firefoxUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade firefoxUpgrade seamonkey | Dec 10, 2025 | Dec 16, 2009 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade media-libs/libtheora.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Dec 17, 2009 |
| Mfsa2009 67 | — | Upgrade to Mozilla Firefox version 3.5.6 | Jun 14, 2012 | Dec 17, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.1 | Feb 3, 2012 | Dec 17, 2009 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.1 | Feb 22, 2012 | Dec 17, 2009 |
| Suse | — | Upgrade orbit2-32bitUpgrade gconf2-32bitUpgrade mozilla-xulrunner192Upgrade MozillaFirefox-branding-SLEDUpgrade libidl-x86Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner192-gnomeUpgrade libfreebl3-x86Upgrade libidl-32bitUpgrade orbit2-x86Upgrade mozilla-nsprUpgrade libfreebl3Upgrade MozillaFirefox-develUpgrade mozilla-xulrunner190-gnomevfsUpgrade libtheora0-x86Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-x86Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner191-translationsUpgrade gconf2-x86Upgrade mozilla-nssUpgrade mozilla-nspr-x86Upgrade libidlUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefoxUpgrade gconf2Upgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nss-x86Upgrade libtheora0-32bitUpgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-nss-toolsUpgrade libtheora0Upgrade mozilla-xulrunner190Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner191Upgrade orbit2Upgrade MozillaFirefox-translations-common | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.5Upgrade xulrunner-1.9.1 | Nov 8, 2024 | Dec 17, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub