Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/liboggz@0.9.5-4
Typedeb
Namespacedebian
Nameliboggz
Version0.9.5-4
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.1.1-1
Latest_non_vulnerable_version1.1.1-1
Affected_by_vulnerabilities
0
url VCID-kg61-mkup-83e9
vulnerability_id VCID-kg61-mkup-83e9
summary
Mozilla upgraded several third party libraries used in media
rendering to address multiple memory safety and stability bugs
identified by members of the Mozilla community.  Some of the bugs
discovered could potentially be used by an attacker to crash a
victim's browser and execute arbitrary code on their
computer.  liboggz, libvorbis,
and liboggplay were all upgraded to address these
issues.Audio and video capabilities were added in Firefox 3.5
so prior releases of Firefox were not affected.
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3377
reference_id CVE-2009-3377
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3377
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-63
reference_id mfsa2009-63
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-63
fixed_packages
0
url pkg:deb/debian/liboggz@1.1.1-1
purl pkg:deb/debian/liboggz@1.1.1-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/liboggz@1.1.1-1
aliases CVE-2009-3377
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kg61-mkup-83e9
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/liboggz@0.9.5-4