CVE-2016-1950

HIGH · 8.8 CVSS Gepubliceerd: 13-03-2016 CWE-119

Beschrijving

Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.

Vendors

Mozilla Oracle Apple Opensuse

Affected products

Network Security Services Firefox Linux Vm Server Iphone Os Mac Os X Tvos Watchos Glassfish Server Iplanet Web Proxy Server Iplanet Web Server Opensuse

Beschrijving

Vendors

Affected products

References