CVE-2009-3388

Description

liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context-dependent attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors, related to "memory safety issues."

How to fix CVE-2009-3388

To remediate CVE-2009-3388, upgrade the affected package to a fixed version below.

• Debian/liboggplay—upgrade to 0.2.1~git20091227-1.1 or later

Is CVE-2009-3388 being exploited?

Low — EPSS is 2.6%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 0.2.1~git20091227-1.1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2009-3388