Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6548
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10684
https://bugzilla.mozilla.org/show_bug.cgi?id=511689
http://www.vupen.com/english/advisories/2009/3334
http://www.mozilla.org/security/announce/2009/mfsa2009-56.html
http://www.mandriva.com/security/advisories?name=MDVSA-2009:294
http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1