CVE:CVE-2009-3978
CNNVD:CNNVD-200911-206
Mozilla Firefox before 3.5.5版本之前的版本的libpr0n中的decoders/gif/nsGIFDecoder2.cpp的nsGIFDecoder2::GifWrite函数允许远程攻击者借助一个具有超大图像尺寸的GIF文件，造成拒绝服务(空指针提领和应用程序崩溃)。该漏洞不同于CVE-2009-3373。
solution:Upgrade mozilla firefox to a higher version than 3.5.4,0.1,0.2,0.3,0.4,0.5,0.6,0.6.1,0.7,0.7.1,0.8,0.9,0.9:rc,0.9.1,0.9.2,0.9.3,0.10,0.10.1,1.0,1.0:preview_release,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.4.1,1.5,1.5:beta1,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,1.5.1,1.5.2,1.5.3,1.5.4,1.5.5,1.5.6,1.5.7,1.5.8,1.8,2.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.10,2.0.0.11,3.0,3.0.5,3.5,3.5.2,3.5.3,and avoid the version (,3.5.4],0.1,0.2,0.3,0.4,0.5,0.6,0.6.1,0.7,0.7.1,0.8,0.9,0.9:rc,0.9.1,0.9.2,0.9.3,0.10,0.10.1,1.0,1.0:preview_release,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.4.1,1.5,1.5:beta1,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,1.5.1,1.5.2,1.5.3,1.5.4,1.5.5,1.5.6,1.5.7,1.5.8,1.8,2.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.10,2.0.0.11,3.0,3.0.5,3.5,3.5.2,3.5.3