{"id":"CVE-2009-3978","aliases":["EUVD-2009-3949","GHSA-8w37-959h-v45j"],"status":"published","title":"The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla...","description":"The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an animated GIF file with a large image size, a different vulnerability than CVE-2009-3373.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01788,"percentile":0.78489,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2009-11-19T00:00:00Z","modified":"2026-06-16T23:12:44Z","products":[{"vendor":"mozilla","product":"firefox"}],"references":[{"url":"http://hg.mozilla.org/releases/mozilla-1.9.1/rev/edf189567edc","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.mozilla.com/en-US/firefox/3.5.5/releasenotes/","tags":["x_refsource_MISC","x_transferred","Patch"]},{"url":"http://www.h-online.com/open/news/item/Mozilla-fixes-critical-bugs-with-Firefox-3-5-5-852070.html","tags":["x_refsource_MISC","x_transferred","Patch"]},{"url":"https://wiki.mozilla.org/Releases/Firefox_3.5.5/Test_Plan","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=525326","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3978"},{"url":"http://www.mozilla.com/en-US/firefox/3.5.5/releasenotes"},{"url":"https://github.com/advisories/GHSA-8w37-959h-v45j"}],"sources":{"cve":[{"id":"CVE-2009-3978","description":"The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an animated GIF file with a large image size, a different vulnerability than CVE-2009-3373.","status":"published","published":"2009-11-19T00:00:00Z","modified":"2024-09-17T01:31:29.946Z","updated_at":"2026-11-02T14:33:24.10565Z"}],"euvd":[{"id":"EUVD-2009-3949","description":"The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an animated GIF file with a large image size, a different vulnerability than CVE-2009-3373.","status":"published","published":"2009-11-19T00:00:00Z","modified":"2024-09-17T01:31:29Z","updated_at":"2026-11-03T00:28:48.901339Z"}],"ghsa":[{"id":"GHSA-8w37-959h-v45j","title":"The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla...","description":"The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an animated GIF file with a large image size, a different vulnerability than CVE-2009-3373.","status":"published","published":"2022-05-02T03:50:17Z","modified":"2025-04-09T04:16:29Z","updated_at":"2026-11-02T15:01:01.075702Z"}],"nvd":[{"id":"CVE-2009-3978","description":"The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an animated GIF file with a large image size, a different vulnerability than CVE-2009-3373.","status":"published","published":"2009-11-19T00:30:00.28Z","modified":"2026-06-16T23:12:44.827Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:37.939838Z"}]}}