The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an animated GIF file with a large image size, a different vulnerability than CVE-2009-3373.

The remote host is affected by the vulnerability described in GLSA-201301-01 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox,       Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition. Furthermore, a remote attacker may be able       to perform Man-in-the-Middle attacks, obtain sensitive information,       bypass restrictions and protection mechanisms, force file downloads,       conduct XML injection attacks, conduct XSS attacks, bypass the Same       Origin Policy, spoof URL&rsquo;s for phishing attacks, trigger a vertical       scroll, spoof the location bar, spoof an SSL indicator, modify the       browser&rsquo;s font, conduct clickjacking attacks, or have other unspecified       impact.
    A local attacker could gain escalated privileges, obtain sensitive       information, or replace an arbitrary downloaded file.
  Workaround :

    There is no known workaround at this time.

The Mozilla Firefox 3.5.5 release fixes some instability issues caused by the 3.5.4 security upgrade.

One crash was assigned a CVE number: CVE-2009-3978: The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an animated GIF file with a large image size.

Also some KDE4 integration bugs were fixed :

  - use mimetype for opening url if known (bnc#556156)

  - fix file dialog resetting icon size (bnc#546490) and     file dialog for multiple files not working (bnc#548267)

  - fix KDE filepicker (bnc#548267,bnc#555438)

  - avoid possible deadlock with KDE integration     (bnc#555202)

The Mozilla Firefox 3.5.5 release fixes some instability issues caused by the 3.5.4 security upgrade.

ID	Name	Product	Family	Severity
63402	GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities (BEAST)	Nessus	Gentoo Local Security Checks	critical
42925	openSUSE Security Update : MozillaFirefox (MozillaFirefox-1597)	Nessus	SuSE Local Security Checks	medium
42876	SuSE 11 Security Update : Mozilla Firefox (SAT Patch Number 1563)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2009-3978

medium

Tenable Plugins

critical

medium

medium