Mozilla

Mozilla

Mozilla Foundation Security Advisory 2012-07

Potential Memory Corruption When Decoding Ogg Vorbis files

Announced
January 31, 2012
Reporter
regenrecht
Impact
Critical
Products
Firefox, SeaMonkey, Thunderbird
Fixed in
  • Firefox 10
  • Firefox 3.6.26
  • SeaMonkey 2.7
  • Thunderbird 10
  • Thunderbird 3.1.18

Description

Security researcher regenrecht reported via TippingPoint's Zero Day Initiative the possibility of memory corruption during the decoding of Ogg Vorbis files. This can cause a crash during decoding and has the potential for remote code execution.

References