10
CVE-2014-1544
- EPSS 3.22%
- Published 23.07.2014 11:12:42
- Last modified 12.04.2025 10:46:40
- Source security@mozilla.org
- Teams watchlist Login
- Open Login
Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.
Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Firefox ESR Version24.0.1
Mozilla ≫ Firefox ESR Version24.0.2
Mozilla ≫ Firefox ESR Version24.2
Mozilla ≫ Firefox ESR Version24.3
Mozilla ≫ Firefox ESR Version24.4
Mozilla ≫ Firefox ESR Version24.5
Mozilla ≫ Firefox ESR Version24.6
Mozilla ≫ Network Security Services Version3.2
Mozilla ≫ Network Security Services Version3.2.1
Mozilla ≫ Network Security Services Version3.3
Mozilla ≫ Network Security Services Version3.3.1
Mozilla ≫ Network Security Services Version3.3.2
Mozilla ≫ Network Security Services Version3.4
Mozilla ≫ Network Security Services Version3.4.1
Mozilla ≫ Network Security Services Version3.4.2
Mozilla ≫ Network Security Services Version3.5
Mozilla ≫ Network Security Services Version3.6
Mozilla ≫ Network Security Services Version3.6.1
Mozilla ≫ Network Security Services Version3.7
Mozilla ≫ Network Security Services Version3.7.1
Mozilla ≫ Network Security Services Version3.7.2
Mozilla ≫ Network Security Services Version3.7.3
Mozilla ≫ Network Security Services Version3.7.5
Mozilla ≫ Network Security Services Version3.7.7
Mozilla ≫ Network Security Services Version3.8
Mozilla ≫ Network Security Services Version3.9
Mozilla ≫ Network Security Services Version3.11.2
Mozilla ≫ Network Security Services Version3.11.3
Mozilla ≫ Network Security Services Version3.11.4
Mozilla ≫ Network Security Services Version3.11.5
Mozilla ≫ Network Security Services Version3.12
Mozilla ≫ Network Security Services Version3.12.1
Mozilla ≫ Network Security Services Version3.12.2
Mozilla ≫ Network Security Services Version3.12.3
Mozilla ≫ Network Security Services Version3.12.3.1
Mozilla ≫ Network Security Services Version3.12.3.2
Mozilla ≫ Network Security Services Version3.12.4
Mozilla ≫ Network Security Services Version3.12.5
Mozilla ≫ Network Security Services Version3.12.6
Mozilla ≫ Network Security Services Version3.12.7
Mozilla ≫ Network Security Services Version3.12.8
Mozilla ≫ Network Security Services Version3.12.9
Mozilla ≫ Network Security Services Version3.12.10
Mozilla ≫ Network Security Services Version3.12.11
Mozilla ≫ Network Security Services Version3.14
Mozilla ≫ Network Security Services Version3.14.1
Mozilla ≫ Network Security Services Version3.14.2
Mozilla ≫ Network Security Services Version3.14.3
Mozilla ≫ Network Security Services Version3.14.4
Mozilla ≫ Network Security Services Version3.14.5
Mozilla ≫ Network Security Services Version3.15
Mozilla ≫ Network Security Services Version3.15.1
Mozilla ≫ Network Security Services Version3.15.2
Mozilla ≫ Network Security Services Version3.15.3
Mozilla ≫ Network Security Services Version3.15.3.1
Mozilla ≫ Network Security Services Version3.15.4
Mozilla ≫ Network Security Services Version3.15.5
Mozilla ≫ Network Security Services Version3.16
Mozilla ≫ Thunderbird Version <= 24.6
Mozilla ≫ Thunderbird Version24.0
Mozilla ≫ Thunderbird Version24.0.1
Mozilla ≫ Thunderbird Version24.1
Mozilla ≫ Thunderbird Version24.1.1
Mozilla ≫ Thunderbird Version24.2
Mozilla ≫ Thunderbird Version24.3
Mozilla ≫ Thunderbird Version24.4
Mozilla ≫ Thunderbird Version24.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.22% | 0.858 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|