Mozilla Firefox 3.5.1/3.0.12 Multiple Memory Corruption Vulnerabilities

Bugtraq ID:	35927
Class:	Unknown
CVE:	CVE-2009-2662 CVE-2009-2663 CVE-2009-2664
Remote:	Yes
Local:	No
Published:	Aug 03 2009 12:00AM
Updated:	Apr 16 2015 06:13PM
Credit:	Lucas Adamski, Bob Clary, and Tobias Markus.
Vulnerable:	SuSE SUSE Linux Enterprise Server 11 DEBUGINFO SuSE SUSE Linux Enterprise Server 11 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 10 SP3 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise SDK 10 SP3 SuSE SUSE Linux Enterprise SDK 10 SP2 SuSE SUSE Linux Enterprise Desktop 11 SuSE SUSE Linux Enterprise Desktop 10 SP3 SuSE SUSE Linux Enterprise Desktop 10 SP2 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SP3 DEBUGINFO SuSE SUSE Linux Enterprise 10 SP2 DEBUGINFO SuSE openSUSE 10.3 SuSE Moblin 2.1 SuSE Moblin 2.0 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 Mozilla Firefox 3.5.1 Mozilla Firefox 3.5 Mozilla Firefox 3.0.12 Mozilla Firefox 3.0.11 Mozilla Firefox 3.0.10 Mozilla Firefox 3.0.9 Mozilla Firefox 3.0.8 Mozilla Firefox 3.0.7 Beta Mozilla Firefox 3.0.7 Mozilla Firefox 3.0.6 Mozilla Firefox 3.0.5 Mozilla Firefox 3.0.4 Mozilla Firefox 3.0.3 Mozilla Firefox 3.0.2 Mozilla Firefox 3.0.1 Mozilla Firefox 3.0 Beta 5 Mozilla Firefox 3.0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:	Mozilla Firefox 3.5.2 Mozilla Firefox 3.0.13

Mozilla Firefox 3.5.1/3.0.12 Multiple Memory Corruption Vulnerabilities

Mozilla Firefox is prone to multiple remote memory-corruption vulnerabilities.

An attacker can exploit these issues to corrupt memory on the affected computer and potentially run arbitrary code in the context of the user running the affected application. Failed exploit attempts will cause denial-of-service conditions.

Versions prior to Firefox 3.5.2 and 3.0.13 are affected.

Mozilla Firefox 3.5.1/3.0.12 Multiple Memory Corruption Vulnerabilities

Attackers can exploit these issues by enticing an unsuspecting victim into visiting a specially crafted webpage. Proofs of concept can be obtained from the associated Mozilla reports in the references.

A commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.

Mozilla Firefox 3.5.1/3.0.12 Multiple Memory Corruption Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 arm

• Debian libvorbis-dev_1.1.2.dfsg-1.4+etch1_arm.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.1.2.dfsg-1.4+etch1_arm.deb


• Debian libvorbis0a_1.1.2.dfsg-1.4+etch1_arm.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.1.2.dfsg-1.4+etch1_arm.deb


• Debian libvorbisenc2_1.1.2.dfsg-1.4+etch1_arm.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.1.2.dfsg-1.4+etch1_arm.deb


• Debian libvorbisfile3_1.1.2.dfsg-1.4+etch1_arm.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.1.2.dfsg-1.4+etch1_arm.deb

Debian Linux 5.0 ia-64

• Debian libvorbis-dev_1.2.0.dfsg-3.1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.2.0.dfsg-3.1+lenny1_ia64.deb


• Debian libvorbis0a_1.2.0.dfsg-3.1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.2.0.dfsg-3.1+lenny1_ia64.deb


• Debian libvorbisenc2_1.2.0.dfsg-3.1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.2.0.dfsg-3.1+lenny1_ia64.deb


• Debian libvorbisfile3_1.2.0.dfsg-3.1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.2.0.dfsg-3.1+lenny1_ia64.deb

Debian Linux 4.0 powerpc

• Debian libvorbis-dev_1.1.2.dfsg-1.4+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.1.2.dfsg-1.4+etch1_powerpc.deb


• Debian libvorbis0a_1.1.2.dfsg-1.4+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.1.2.dfsg-1.4+etch1_powerpc.deb


• Debian libvorbisenc2_1.1.2.dfsg-1.4+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.1.2.dfsg-1.4+etch1_powerpc.deb


• Debian libvorbisfile3_1.1.2.dfsg-1.4+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.1.2.dfsg-1.4+etch1_powerpc.deb

Debian Linux 5.0 alpha

• Debian libvorbis-dev_1.2.0.dfsg-3.1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.2.0.dfsg-3.1+lenny1_alpha.deb


• Debian libvorbis0a_1.2.0.dfsg-3.1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.2.0.dfsg-3.1+lenny1_alpha.deb


• Debian libvorbisenc2_1.2.0.dfsg-3.1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.2.0.dfsg-3.1+lenny1_alpha.deb


• Debian libvorbisfile3_1.2.0.dfsg-3.1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.2.0.dfsg-3.1+lenny1_alpha.deb

S.u.S.E. openSUSE 11.1

• S.u.S.E. mozilla-xulrunner190-1.9.0.14-0.1.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/mozilla-xulrunner190 -1.9.0.14-0.1.1.i586.rpm


• S.u.S.E. mozilla-xulrunner190-1.9.0.14-0.1.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/mozilla-xulrunner190- 1.9.0.14-0.1.1.ppc.rpm


• S.u.S.E. mozilla-xulrunner190-1.9.0.14-0.1.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/mozilla-xulrunner1 90-1.9.0.14-0.1.1.x86_64.rpm


• S.u.S.E. mozilla-xulrunner190-32bit-1.9.0.14-0.1.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/mozilla-xulrunner1 90-32bit-1.9.0.14-0.1.1.x86_64.rpm


• S.u.S.E. mozilla-xulrunner190-devel-1.9.0.14-0.1.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/mozilla-xulrunner190 -devel-1.9.0.14-0.1.1.i586.rpm


• S.u.S.E. mozilla-xulrunner190-devel-1.9.0.14-0.1.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/mozilla-xulrunner190- devel-1.9.0.14-0.1.1.ppc.rpm


• S.u.S.E. mozilla-xulrunner190-devel-1.9.0.14-0.1.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/mozilla-xulrunner1 90-devel-1.9.0.14-0.1.1.x86_64.rpm


• S.u.S.E. mozilla-xulrunner190-gnomevfs-1.9.0.14-0.1.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/mozilla-xulrunner190 -gnomevfs-1.9.0.14-0.1.1.i586.rpm


• S.u.S.E. mozilla-xulrunner190-gnomevfs-1.9.0.14-0.1.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/mozilla-xulrunner190- gnomevfs-1.9.0.14-0.1.1.ppc.rpm


• S.u.S.E. mozilla-xulrunner190-gnomevfs-1.9.0.14-0.1.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/mozilla-xulrunner1 90-gnomevfs-1.9.0.14-0.1.1.x86_64.rpm


• S.u.S.E. mozilla-xulrunner190-gnomevfs-32bit-1.9.0.14-0.1.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/mozilla-xulrunner1 90-gnomevfs-32bit-1.9.0.14-0.1.1.x86_64.rpm


• S.u.S.E. mozilla-xulrunner190-translations-1.9.0.14-0.1.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/mozilla-xulrunner190 -translations-1.9.0.14-0.1.1.i586.rpm


• S.u.S.E. mozilla-xulrunner190-translations-1.9.0.14-0.1.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/mozilla-xulrunner190- translations-1.9.0.14-0.1.1.ppc.rpm


• S.u.S.E. mozilla-xulrunner190-translations-1.9.0.14-0.1.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/mozilla-xulrunner1 90-translations-1.9.0.14-0.1.1.x86_64.rpm


• S.u.S.E. mozilla-xulrunner190-translations-32bit-1.9.0.14-0.1.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/mozilla-xulrunner1 90-translations-32bit-1.9.0.14-0.1.1.x86_64.rpm


• S.u.S.E. MozillaFirefox-3.0.14-0.1.2.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/MozillaFirefox-3.0.1 4-0.1.2.i586.rpm


• S.u.S.E. MozillaFirefox-3.0.14-0.1.2.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/MozillaFirefox-3.0.14 -0.1.2.ppc.rpm


• S.u.S.E. MozillaFirefox-3.0.14-0.1.2.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/MozillaFirefox-3.0 .14-0.1.2.x86_64.rpm


• S.u.S.E. MozillaFirefox-branding-upstream-3.0.14-0.1.2.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/MozillaFirefox-brand ing-upstream-3.0.14-0.1.2.i586.rpm


• S.u.S.E. MozillaFirefox-branding-upstream-3.0.14-0.1.2.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/MozillaFirefox-brandi ng-upstream-3.0.14-0.1.2.ppc.rpm


• S.u.S.E. MozillaFirefox-branding-upstream-3.0.14-0.1.2.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/MozillaFirefox-bra nding-upstream-3.0.14-0.1.2.x86_64.rpm


• S.u.S.E. MozillaFirefox-translations-3.0.14-0.1.2.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/MozillaFirefox-trans lations-3.0.14-0.1.2.i586.rpm


• S.u.S.E. MozillaFirefox-translations-3.0.14-0.1.2.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/MozillaFirefox-transl ations-3.0.14-0.1.2.ppc.rpm


• S.u.S.E. MozillaFirefox-translations-3.0.14-0.1.2.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/MozillaFirefox-tra nslations-3.0.14-0.1.2.x86_64.rpm


• S.u.S.E. python-xpcom190-1.9.0.14-0.1.1.i586.rpm
  http://download.opensuse.org/update/11.1/rpm/i586/python-xpcom190-1.9. 0.14-0.1.1.i586.rpm


• S.u.S.E. python-xpcom190-1.9.0.14-0.1.1.ppc.rpm
  http://download.opensuse.org/update/11.1/rpm/ppc/python-xpcom190-1.9.0 .14-0.1.1.ppc.rpm


• S.u.S.E. python-xpcom190-1.9.0.14-0.1.1.x86_64.rpm
  http://download.opensuse.org/update/11.1/rpm/x86_64/python-xpcom190-1. 9.0.14-0.1.1.x86_64.rpm

Debian Linux 5.0 ia-32

• Debian libvorbis-dev_1.2.0.dfsg-3.1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.2.0.dfsg-3.1+lenny1_i386.deb


• Debian libvorbis0a_1.2.0.dfsg-3.1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.2.0.dfsg-3.1+lenny1_i386.deb


• Debian libvorbisenc2_1.2.0.dfsg-3.1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.2.0.dfsg-3.1+lenny1_i386.deb


• Debian libvorbisfile3_1.2.0.dfsg-3.1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.2.0.dfsg-3.1+lenny1_i386.deb

Debian Linux 5.0 s/390

• Debian libvorbis-dev_1.2.0.dfsg-3.1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.2.0.dfsg-3.1+lenny1_s390.deb


• Debian libvorbis0a_1.2.0.dfsg-3.1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.2.0.dfsg-3.1+lenny1_s390.deb


• Debian libvorbisenc2_1.2.0.dfsg-3.1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.2.0.dfsg-3.1+lenny1_s390.deb


• Debian libvorbisfile3_1.2.0.dfsg-3.1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.2.0.dfsg-3.1+lenny1_s390.deb

Debian Linux 5.0 mipsel

• Debian libvorbis-dev_1.2.0.dfsg-3.1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.2.0.dfsg-3.1+lenny1_mipsel.deb


• Debian libvorbis0a_1.2.0.dfsg-3.1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.2.0.dfsg-3.1+lenny1_mipsel.deb


• Debian libvorbisenc2_1.2.0.dfsg-3.1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.2.0.dfsg-3.1+lenny1_mipsel.deb


• Debian libvorbisfile3_1.2.0.dfsg-3.1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.2.0.dfsg-3.1+lenny1_mipsel.deb

Debian Linux 4.0 amd64

• Debian libvorbis-dev_1.1.2.dfsg-1.4+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.1.2.dfsg-1.4+etch1_amd64.deb


• Debian libvorbis0a_1.1.2.dfsg-1.4+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.1.2.dfsg-1.4+etch1_amd64.deb


• Debian libvorbisenc2_1.1.2.dfsg-1.4+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.1.2.dfsg-1.4+etch1_amd64.deb


• Debian libvorbisfile3_1.1.2.dfsg-1.4+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.1.2.dfsg-1.4+etch1_amd64.deb

Debian Linux 4.0 ia-32

• Debian libvorbis-dev_1.1.2.dfsg-1.4+etch1_i386.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.1.2.dfsg-1.4+etch1_i386.deb


• Debian libvorbis0a_1.1.2.dfsg-1.4+etch1_i386.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.1.2.dfsg-1.4+etch1_i386.deb


• Debian libvorbisenc2_1.1.2.dfsg-1.4+etch1_i386.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.1.2.dfsg-1.4+etch1_i386.deb


• Debian libvorbisfile3_1.1.2.dfsg-1.4+etch1_i386.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.1.2.dfsg-1.4+etch1_i386.deb

Debian Linux 5.0 hppa

• Debian libvorbis-dev_1.2.0.dfsg-3.1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.2.0.dfsg-3.1+lenny1_hppa.deb


• Debian libvorbis0a_1.2.0.dfsg-3.1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.2.0.dfsg-3.1+lenny1_hppa.deb


• Debian libvorbisenc2_1.2.0.dfsg-3.1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.2.0.dfsg-3.1+lenny1_hppa.deb


• Debian libvorbisfile3_1.2.0.dfsg-3.1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.2.0.dfsg-3.1+lenny1_hppa.deb

Debian Linux 4.0 hppa

• Debian libvorbis-dev_1.1.2.dfsg-1.4+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.1.2.dfsg-1.4+etch1_hppa.deb


• Debian libvorbis0a_1.1.2.dfsg-1.4+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.1.2.dfsg-1.4+etch1_hppa.deb


• Debian libvorbisenc2_1.1.2.dfsg-1.4+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.1.2.dfsg-1.4+etch1_hppa.deb


• Debian libvorbisfile3_1.1.2.dfsg-1.4+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.1.2.dfsg-1.4+etch1_hppa.deb

Debian Linux 4.0 sparc

• Debian libvorbis-dev_1.1.2.dfsg-1.4+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.1.2.dfsg-1.4+etch1_sparc.deb


• Debian libvorbis0a_1.1.2.dfsg-1.4+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.1.2.dfsg-1.4+etch1_sparc.deb


• Debian libvorbisenc2_1.1.2.dfsg-1.4+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.1.2.dfsg-1.4+etch1_sparc.deb


• Debian libvorbisfile3_1.1.2.dfsg-1.4+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.1.2.dfsg-1.4+etch1_sparc.deb

Debian Linux 4.0 s/390

• Debian libvorbis-dev_1.1.2.dfsg-1.4+etch1_s390.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.1.2.dfsg-1.4+etch1_s390.deb


• Debian libvorbis0a_1.1.2.dfsg-1.4+etch1_s390.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.1.2.dfsg-1.4+etch1_s390.deb


• Debian libvorbisenc2_1.1.2.dfsg-1.4+etch1_s390.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.1.2.dfsg-1.4+etch1_s390.deb


• Debian libvorbisfile3_1.1.2.dfsg-1.4+etch1_s390.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.1.2.dfsg-1.4+etch1_s390.deb

Debian Linux 5.0 arm

• Debian libvorbis-dev_1.2.0.dfsg-3.1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.2.0.dfsg-3.1+lenny1_arm.deb


• Debian libvorbis0a_1.2.0.dfsg-3.1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.2.0.dfsg-3.1+lenny1_arm.deb


• Debian libvorbisenc2_1.2.0.dfsg-3.1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.2.0.dfsg-3.1+lenny1_arm.deb


• Debian libvorbisfile3_1.2.0.dfsg-3.1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.2.0.dfsg-3.1+lenny1_arm.deb

Debian Linux 4.0 alpha

• Debian libvorbis-dev_1.1.2.dfsg-1.4+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.1.2.dfsg-1.4+etch1_alpha.deb


• Debian libvorbis0a_1.1.2.dfsg-1.4+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.1.2.dfsg-1.4+etch1_alpha.deb


• Debian libvorbisenc2_1.1.2.dfsg-1.4+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.1.2.dfsg-1.4+etch1_alpha.deb


• Debian libvorbisfile3_1.1.2.dfsg-1.4+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.1.2.dfsg-1.4+etch1_alpha.deb

Debian Linux 5.0 armel

• Debian libvorbis-dev_1.2.0.dfsg-3.1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.2.0.dfsg-3.1+lenny1_armel.deb


• Debian libvorbis0a_1.2.0.dfsg-3.1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.2.0.dfsg-3.1+lenny1_armel.deb


• Debian libvorbisenc2_1.2.0.dfsg-3.1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.2.0.dfsg-3.1+lenny1_armel.deb


• Debian libvorbisfile3_1.2.0.dfsg-3.1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.2.0.dfsg-3.1+lenny1_armel.deb

S.u.S.E. openSUSE 11.0

• S.u.S.E. mozilla-xulrunner190-1.9.0.14-0.1.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/mozilla-xulrunner190 -1.9.0.14-0.1.i586.rpm


• S.u.S.E. mozilla-xulrunner190-1.9.0.14-0.1.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/mozilla-xulrunner190- 1.9.0.14-0.1.ppc.rpm


• S.u.S.E. mozilla-xulrunner190-1.9.0.14-0.1.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/mozilla-xulrunner1 90-1.9.0.14-0.1.x86_64.rpm


• S.u.S.E. mozilla-xulrunner190-32bit-1.9.0.14-0.1.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/mozilla-xulrunner1 90-32bit-1.9.0.14-0.1.x86_64.rpm


• S.u.S.E. mozilla-xulrunner190-64bit-1.9.0.14-0.1.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/mozilla-xulrunner190- 64bit-1.9.0.14-0.1.ppc.rpm


• S.u.S.E. mozilla-xulrunner190-devel-1.9.0.14-0.1.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/mozilla-xulrunner190 -devel-1.9.0.14-0.1.i586.rpm


• S.u.S.E. mozilla-xulrunner190-devel-1.9.0.14-0.1.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/mozilla-xulrunner190- devel-1.9.0.14-0.1.ppc.rpm


• S.u.S.E. mozilla-xulrunner190-devel-1.9.0.14-0.1.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/mozilla-xulrunner1 90-devel-1.9.0.14-0.1.x86_64.rpm


• S.u.S.E. mozilla-xulrunner190-gnomevfs-1.9.0.14-0.1.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/mozilla-xulrunner190 -gnomevfs-1.9.0.14-0.1.i586.rpm


• S.u.S.E. mozilla-xulrunner190-gnomevfs-1.9.0.14-0.1.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/mozilla-xulrunner190- gnomevfs-1.9.0.14-0.1.ppc.rpm


• S.u.S.E. mozilla-xulrunner190-gnomevfs-1.9.0.14-0.1.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/mozilla-xulrunner1 90-gnomevfs-1.9.0.14-0.1.x86_64.rpm


• S.u.S.E. mozilla-xulrunner190-gnomevfs-32bit-1.9.0.14-0.1.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/mozilla-xulrunner1 90-gnomevfs-32bit-1.9.0.14-0.1.x86_64.rpm


• S.u.S.E. mozilla-xulrunner190-gnomevfs-64bit-1.9.0.14-0.1.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/mozilla-xulrunner190- gnomevfs-64bit-1.9.0.14-0.1.ppc.rpm


• S.u.S.E. mozilla-xulrunner190-translations-1.9.0.14-0.1.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/mozilla-xulrunner190 -translations-1.9.0.14-0.1.i586.rpm


• S.u.S.E. mozilla-xulrunner190-translations-1.9.0.14-0.1.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/mozilla-xulrunner190- translations-1.9.0.14-0.1.ppc.rpm


• S.u.S.E. mozilla-xulrunner190-translations-1.9.0.14-0.1.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/mozilla-xulrunner1 90-translations-1.9.0.14-0.1.x86_64.rpm


• S.u.S.E. mozilla-xulrunner190-translations-32bit-1.9.0.14-0.1.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/mozilla-xulrunner1 90-translations-32bit-1.9.0.14-0.1.x86_64.rpm


• S.u.S.E. mozilla-xulrunner190-translations-64bit-1.9.0.14-0.1.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/mozilla-xulrunner190- translations-64bit-1.9.0.14-0.1.ppc.rpm


• S.u.S.E. MozillaFirefox-3.0.14-0.1.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/MozillaFirefox-3.0.1 4-0.1.i586.rpm


• S.u.S.E. MozillaFirefox-3.0.14-0.1.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/MozillaFirefox-3.0.14 -0.1.ppc.rpm


• S.u.S.E. MozillaFirefox-3.0.14-0.1.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/MozillaFirefox-3.0 .14-0.1.x86_64.rpm


• S.u.S.E. MozillaFirefox-translations-3.0.14-0.1.i586.rpm
  http://download.opensuse.org/update/11.0/rpm/i586/MozillaFirefox-trans lations-3.0.14-0.1.i586.rpm


• S.u.S.E. MozillaFirefox-translations-3.0.14-0.1.ppc.rpm
  http://download.opensuse.org/update/11.0/rpm/ppc/MozillaFirefox-transl ations-3.0.14-0.1.ppc.rpm


• S.u.S.E. MozillaFirefox-translations-3.0.14-0.1.x86_64.rpm
  http://download.opensuse.org/update/11.0/rpm/x86_64/MozillaFirefox-tra nslations-3.0.14-0.1.x86_64.rpm

Debian Linux 4.0 mipsel

• Debian libvorbis-dev_1.1.2.dfsg-1.4+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.1.2.dfsg-1.4+etch1_mipsel.deb


• Debian libvorbis0a_1.1.2.dfsg-1.4+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.1.2.dfsg-1.4+etch1_mipsel.deb


• Debian libvorbisenc2_1.1.2.dfsg-1.4+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.1.2.dfsg-1.4+etch1_mipsel.deb


• Debian libvorbisfile3_1.1.2.dfsg-1.4+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.1.2.dfsg-1.4+etch1_mipsel.deb

Debian Linux 5.0 amd64

• Debian libvorbis-dev_1.2.0.dfsg-3.1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.2.0.dfsg-3.1+lenny1_amd64.deb


• Debian libvorbis0a_1.2.0.dfsg-3.1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.2.0.dfsg-3.1+lenny1_amd64.deb


• Debian libvorbisenc2_1.2.0.dfsg-3.1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.2.0.dfsg-3.1+lenny1_amd64.deb


• Debian libvorbisfile3_1.2.0.dfsg-3.1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.2.0.dfsg-3.1+lenny1_amd64.deb

Debian Linux 5.0 mips

• Debian libvorbis-dev_1.2.0.dfsg-3.1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.2.0.dfsg-3.1+lenny1_mips.deb


• Debian libvorbis0a_1.2.0.dfsg-3.1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.2.0.dfsg-3.1+lenny1_mips.deb


• Debian libvorbisenc2_1.2.0.dfsg-3.1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.2.0.dfsg-3.1+lenny1_mips.deb


• Debian libvorbisfile3_1.2.0.dfsg-3.1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.2.0.dfsg-3.1+lenny1_mips.deb

Debian Linux 5.0 powerpc

• Debian libvorbis-dev_1.2.0.dfsg-3.1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.2.0.dfsg-3.1+lenny1_powerpc.deb


• Debian libvorbis0a_1.2.0.dfsg-3.1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.2.0.dfsg-3.1+lenny1_powerpc.deb


• Debian libvorbisenc2_1.2.0.dfsg-3.1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.2.0.dfsg-3.1+lenny1_powerpc.deb


• Debian libvorbisfile3_1.2.0.dfsg-3.1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.2.0.dfsg-3.1+lenny1_powerpc.deb

Debian Linux 4.0 ia-64

• Debian libvorbis-dev_1.1.2.dfsg-1.4+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.1.2.dfsg-1.4+etch1_ia64.deb


• Debian libvorbis0a_1.1.2.dfsg-1.4+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.1.2.dfsg-1.4+etch1_ia64.deb


• Debian libvorbisenc2_1.1.2.dfsg-1.4+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.1.2.dfsg-1.4+etch1_ia64.deb


• Debian libvorbisfile3_1.1.2.dfsg-1.4+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.1.2.dfsg-1.4+etch1_ia64.deb

Debian Linux 4.0 mips

• Debian libvorbis-dev_1.1.2.dfsg-1.4+etch1_mips.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.1.2.dfsg-1.4+etch1_mips.deb


• Debian libvorbis0a_1.1.2.dfsg-1.4+etch1_mips.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.1.2.dfsg-1.4+etch1_mips.deb


• Debian libvorbisenc2_1.1.2.dfsg-1.4+etch1_mips.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.1.2.dfsg-1.4+etch1_mips.deb


• Debian libvorbisfile3_1.1.2.dfsg-1.4+etch1_mips.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.1.2.dfsg-1.4+etch1_mips.deb

Debian Linux 5.0 sparc

• Debian libvorbis-dev_1.2.0.dfsg-3.1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis- dev_1.2.0.dfsg-3.1+lenny1_sparc.deb


• Debian libvorbis0a_1.2.0.dfsg-3.1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbis0 a_1.2.0.dfsg-3.1+lenny1_sparc.deb


• Debian libvorbisenc2_1.2.0.dfsg-3.1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbise nc2_1.2.0.dfsg-3.1+lenny1_sparc.deb


• Debian libvorbisfile3_1.2.0.dfsg-3.1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/libv/libvorbis/libvorbisf ile3_1.2.0.dfsg-3.1+lenny1_sparc.deb

Mozilla Firefox 3.5.1/3.0.12 Multiple Memory Corruption Vulnerabilities

References:

• Bug 501270 - Assertion failure: !fp->fun || !(fp->fun->flags & JSFUN_HEAVYWEIGH (Mozilla)
  
• Bug 502832 - TM: Crash [@ memcpy] (Mozilla)
  
• Mozilla Homepage (Mozilla Foundation)
  
• Mozilla Foundation Security Advisory 2009-45 (Mozilla)