<em style='font-weight:bold;'>(Description Provided by <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2011-3665" target="_blank">CVE</a>)</em> : Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an Ogg VIDEO element that is not properly handled after scaling.

Upgrade to Firefox and Thunderbird to version 9.0 or higher, and SeaMonkey to version 2.6 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1026445 1026446 1026447
• OVAL ID: 14640
• CVE ID: 2011-3665 (see also: NVD)
• Secunia Advisory ID: 47302 47334 47460 47504 47761 47958 51766
• ISS X-Force ID: 71913
• Related OSVDB ID: 77951 77952 77953 77954 77955
• Mail List Post: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html
  http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html
• Vendor Specific News/Changelog Entry: http://lists.opensuse.org/opensuse-updates/2012-02/msg00010.html
  http://www.gentoo.org/security/en/glsa/glsa-201301-01.xml
  http://www.mozilla.org/security/announce/2011/mfsa2011-58.html
  http://www.ubuntu.com/usn/usn-1306-1/
  http://www.ubuntu.com/usn/usn-1306-2/
  http://www.ubuntu.com/usn/usn-1343-1
  https://bugzilla.mozilla.org/show_bug.cgi?id=701259 [ Auth Req'd ]
  https://hermes.opensuse.org/messages/13154636
  https://hermes.opensuse.org/messages/13155295
• Other Advisory URL: http://www.mandriva.com/security/advisories?name=MDVSA-2011:192

Unknown or Incomplete