Description
The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2013-0802 | The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate. |
Ubuntu USN |
USN-1786-1 | Firefox vulnerabilities |
Ubuntu USN |
USN-1791-1 | Thunderbird vulnerabilities |
References
History
Mon, 21 Oct 2024 14:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | ||
| Vendors & Products |
Mozilla firefox Esr
|
Subscriptions
Canonical
Subscribe
Ubuntu Linux
Subscribe
Mozilla
Subscribe
Firefox
Subscribe
Network Security Services
Subscribe
Seamonkey
Subscribe
Thunderbird
Subscribe
Thunderbird Esr
Subscribe
Oracle
Subscribe
Vm Server
Subscribe
Redhat
Subscribe
Enterprise Linux
Subscribe
Enterprise Linux Desktop
Subscribe
Enterprise Linux Eus
Subscribe
Enterprise Linux Server
Subscribe
Enterprise Linux Server Aus
Subscribe
Enterprise Linux Workstation
Subscribe
Status: PUBLISHED
Assigner: mozilla
Published:
Updated: 2024-08-06T14:41:47.091Z
Reserved: 2013-01-02T00:00:00.000Z
Link: CVE-2013-0791
No data.
Status : Deferred
Published: 2013-04-03T11:56:21.117
Modified: 2025-04-11T00:51:21.963
Link: CVE-2013-0791
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Ubuntu USN