CVE		CVE-2009-3379
Status		UNKNOWN
Description		Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.  NOTE: this might overlap CVE-2009-2663.
Severity		High
CVSS score		10
CVSS vector		(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Phase		ASSIGNED (21.08.2010)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-3379
References		CONFIRM : http://www.mozilla.org/security/announce/2009/mfsa...
		CONFIRM : https://bugzilla.mozilla.org/show_bug.cgi?id=499512
		CONFIRM : https://bugzilla.mozilla.org/show_bug.cgi?id=500254
		CONFIRM : https://bugzilla.mozilla.org/show_bug.cgi?id=501279
		CONFIRM : https://bugzilla.mozilla.org/show_bug.cgi?id=507167
		CONFIRM : https://bugzilla.mozilla.org/show_bug.cgi?id=515889
		FEDORA : FEDORA-2009-11169
		FEDORA : FEDORA-2009-11243
		MANDRIVA : MDVSA-2009:294
		OVAL : oval:org.mitre.oval:def:10993
		OVAL : oval:org.mitre.oval:def:6582
		REDHAT : RHSA-2009:1561
		SECUNIA : 37306
		SECUNIA : 37340
		SUNALERT : 272909
		UBUNTU : USN-861-1
		VUPEN : ADV-2009-3334
SecurityVulns:		Mozilla Firefox / Seamonkey multiple security vulnerabilities
		libvorbis library multiple security vulnerabilities