The host is installed with Firefox browser and is prone to Denial of Service vulnerabilities.

Successful exploitation could allows remote attacker to cause a vulnerable application to crash. Impact Level: Application

Upgrade to Firefox version 3.5.5 or later, http://www.mozilla.com/en-US/firefox/all.html

A NULL pointer dereference error in 'nsGIFDecoder2::GifWrite' function in 'decoders/gif/nsGIFDecoder2.cpp' in libpr0n, which can be exploited to cause application crash via an animated 'GIF' file with a large image size.

Mozilla Firefox version prior to 3.5.5 on Windows.

• http://hg.mozilla.org/releases/mozilla-1.9.1/rev/edf189567edc
• https://bugzilla.mozilla.org/show_bug.cgi?id=525326
• https://wiki.mozilla.org/Releases/Firefox_3.5.5/Test_Plan

---

Updated on 2015-03-25