10

CVE-2014-1544

Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 30.0
Mozilla ≫ Firefox Version24.0
Mozilla ≫ Firefox Version24.0.1
Mozilla ≫ Firefox Version24.0.2
Mozilla ≫ Firefox Version24.1.0
Mozilla ≫ Firefox Version24.1.1
Mozilla ≫ Firefox ESR Version24.2
Mozilla ≫ Firefox ESR Version24.3
Mozilla ≫ Firefox ESR Version24.4
Mozilla ≫ Firefox ESR Version24.5
Mozilla ≫ Firefox ESR Version24.6
Mozilla ≫ Network Security Services Version3.12.3.1
Mozilla ≫ Network Security Services Version3.12.3.2
Mozilla ≫ Network Security Services Version3.12.10
Mozilla ≫ Network Security Services Version3.12.11
Mozilla ≫ Network Security Services Version3.15.3.1
Mozilla ≫ Thunderbird Version <= 24.6
Mozilla ≫ Thunderbird Version24.0
Mozilla ≫ Thunderbird Version24.0.1
Mozilla ≫ Thunderbird Version24.1
Mozilla ≫ Thunderbird Version24.1.1
Mozilla ≫ Thunderbird Version24.2
Mozilla ≫ Thunderbird Version24.3
Mozilla ≫ Thunderbird Version24.4
Mozilla ≫ Thunderbird Version24.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.11% 0.925
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
https://security.gentoo.org/glsa/201504-01
http://secunia.com/advisories/60621
http://secunia.com/advisories/59591
http://secunia.com/advisories/59719
http://secunia.com/advisories/59760
http://secunia.com/advisories/60083
http://secunia.com/advisories/60486
http://secunia.com/advisories/60628
http://www.debian.org/security/2014/dsa-2986
http://www.debian.org/security/2014/dsa-2996
http://www.mozilla.org/security/announce/2014/mfsa2014-63.html
Vendor Advisory
http://www.securityfocus.com/bid/68816
http://www.securitytracker.com/id/1030617
https://bugzilla.mozilla.org/show_bug.cgi?id=963150