CVE-2009-2044

Description

Mozilla Firefox 3.0.10 and earlier on Linux allows remote attackers to cause a denial of service (application crash) via a URI for a large GIF image in the BACKGROUND attribute of a BODY element.

How to fix CVE-2009-2044

To remediate CVE-2009-2044, upgrade the affected package to a fixed version below.

• Debian/cairo—upgrade to 1.8.8-2 or later

Is CVE-2009-2044 being exploited?

Moderate — EPSS is 6.4%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (1)

• from 0, < 1.8.8-2

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2009-2044