Heap buffer overflow in GIF color map parser

Heap buffer overflow in GIF color map parser

Announced

October 27, 2009

Reporter

regenrecht, iDefense

Impact

Critical

Products

Firefox, SeaMonkey

Fixed in

• Firefox 3.0.15
• Firefox 3.5.4
• SeaMonkey 2

This flaw does not affect products built on the Gecko 1.8 browser engine such as Thunderbird 2.

Description

Security research firm iDefense reported that researcher regenrecht discovered a heap-based buffer overflow in Mozilla's GIF image parser. This vulnerability could potentially be used by an attacker to crash a victim's browser and run arbitrary code on their computer.

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=511689
• CVE-2009-3373