Deskripsi CVE

The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an animated GIF file with a large image size, a different vulnerability than CVE-2009-3373.

Informasi CVE

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	4.3		AV:N/AC:M/Au:N/C:N/I:N/A:P	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Mozilla>>Firefox >> Version Hingga (termasuk) 3.5.4

Mozilla>>Firefox >> Version 0.1

Mozilla>>Firefox >> Version 0.2

Mozilla>>Firefox >> Version 0.3

Mozilla>>Firefox >> Version 0.4

Mozilla>>Firefox >> Version 0.5

Mozilla>>Firefox >> Version 0.6

Mozilla>>Firefox >> Version 0.6.1

Mozilla>>Firefox >> Version 0.7

Mozilla>>Firefox >> Version 0.7.1

Mozilla>>Firefox >> Version 0.8

Mozilla>>Firefox >> Version 0.9

Mozilla>>Firefox >> Version 0.9.1

Mozilla>>Firefox >> Version 0.9.2

Mozilla>>Firefox >> Version 0.9.3

Mozilla>>Firefox >> Version 0.10

Mozilla>>Firefox >> Version 0.10.1

Mozilla>>Firefox >> Version 1.0

Mozilla>>Firefox >> Version 1.0.1

Mozilla>>Firefox >> Version 1.0.2

Mozilla>>Firefox >> Version 1.0.3

Mozilla>>Firefox >> Version 1.0.4

Mozilla>>Firefox >> Version 1.0.5

Mozilla>>Firefox >> Version 1.0.6

Mozilla>>Firefox >> Version 1.0.7

Mozilla>>Firefox >> Version 1.0.8

Mozilla>>Firefox >> Version 1.4.1

Mozilla>>Firefox >> Version 1.5

Mozilla>>Firefox >> Version 1.5.0.1

Mozilla>>Firefox >> Version 1.5.0.2

Mozilla>>Firefox >> Version 1.5.0.3

Mozilla>>Firefox >> Version 1.5.0.4

Mozilla>>Firefox >> Version 1.5.0.5

Mozilla>>Firefox >> Version 1.5.0.6

Mozilla>>Firefox >> Version 1.5.0.7

Mozilla>>Firefox >> Version 1.5.0.8

Mozilla>>Firefox >> Version 1.5.0.9

Mozilla>>Firefox >> Version 1.5.0.10

Mozilla>>Firefox >> Version 1.5.0.11

Mozilla>>Firefox >> Version 1.5.0.12

Mozilla>>Firefox >> Version 1.5.1

Mozilla>>Firefox >> Version 1.5.2

Mozilla>>Firefox >> Version 1.5.3

Mozilla>>Firefox >> Version 1.5.4

Mozilla>>Firefox >> Version 1.5.5

Mozilla>>Firefox >> Version 1.5.6

Mozilla>>Firefox >> Version 1.5.7

Mozilla>>Firefox >> Version 1.5.8

Mozilla>>Firefox >> Version 1.8

Mozilla>>Firefox >> Version 2.0

Mozilla>>Firefox >> Version 2.0.0.1

Mozilla>>Firefox >> Version 2.0.0.2

Mozilla>>Firefox >> Version 2.0.0.3

Mozilla>>Firefox >> Version 2.0.0.4

Mozilla>>Firefox >> Version 2.0.0.5

Mozilla>>Firefox >> Version 2.0.0.6

Mozilla>>Firefox >> Version 2.0.0.7

Mozilla>>Firefox >> Version 2.0.0.8

Mozilla>>Firefox >> Version 2.0.0.9

Mozilla>>Firefox >> Version 2.0.0.10

Mozilla>>Firefox >> Version 2.0.0.11

Mozilla>>Firefox >> Version 3.0

Mozilla>>Firefox >> Version 3.0.5

Mozilla>>Firefox >> Version 3.5

Mozilla>>Firefox >> Version 3.5.2

Mozilla>>Firefox >> Version 3.5.3

Referensi

http://hg.mozilla.org/releases/mozilla-1.9.1/rev/edf189567edc
Tags : x_refsource_CONFIRM

http://www.mozilla.com/en-US/firefox/3.5.5/releasenotes/
Tags : x_refsource_MISC

http://www.h-online.com/open/news/item/Mozilla-fixes-critical-bugs-with-Firefox-3-5-5-852070.html
Tags : x_refsource_MISC

https://wiki.mozilla.org/Releases/Firefox_3.5.5/Test_Plan
Tags : x_refsource_CONFIRM

https://bugzilla.mozilla.org/show_bug.cgi?id=525326
Tags : x_refsource_CONFIRM

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.21%	–	–
2022-03-27	–	–	1.21%	–	–
2022-04-03	–	–	1.21%	–	–
2022-05-08	–	–	1.21%	–	–
2022-08-28	–	–	1.21%	–	–
2023-02-26	–	–	1.21%	–	–
2023-03-12	–	–	–	1.36%	–
2023-08-13	–	–	–	1.36%	–
2024-02-11	–	–	–	0.42%	–
2024-03-17	–	–	–	0.5%	–
2024-06-02	–	–	–	0.69%	–
2024-09-22	–	–	–	1.36%	–
2024-09-29	–	–	–	1.36%	–
2024-10-06	–	–	–	1.36%	–
2024-12-22	–	–	–	1.36%	–
2025-01-19	–	–	–	1.36%	–
2025-03-18	–	–	–	–	0.71%
2025-04-15	–	–	–	–	0.71%
2025-11-01	–	–	–	–	0.71%
2025-11-04	–	–	–	–	0.71%
2025-11-18	–	–	–	–	0.71%
2025-11-21	–	–	–	–	0.71%
2025-12-01	–	–	–	–	0.71%
2025-12-03	–	–	–	–	0.68%
2026-04-12	–	–	–	–	0.68%

Tanggal	Persentil
2022-02-06	41%
2022-03-27	42%
2022-04-03	64%
2022-05-08	65%
2022-08-28	66%
2023-02-26	67%
2023-03-12	84%
2023-08-13	85%
2024-02-11	74%
2024-03-17	76%
2024-06-02	8%
2024-09-22	86%
2024-09-29	86%
2024-10-06	87%
2024-12-22	86%
2025-01-19	86%
2025-03-18	7%
2025-04-15	71%
2025-11-01	72%
2025-11-04	71%
2025-11-18	7%
2025-11-21	71%
2025-12-01	72%
2025-12-03	71%
2026-04-12	72%

CVE-2009-3978 : Detail

CVE-2009-3978