Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 6 min 141 bronnen
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2015-2730

MEDIUM · 4.3 CVSS Gepubliceerd: CWE-310

Beschrijving

Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors.

Vendors

Novell Debian Mozilla Oracle

Affected products

Suse Linux Enterprise Software Development Kit Debian Linux Suse Linux Enterprise Desktop Suse Linux Enterprise Server Network Security Services Firefox Firefox Esr Solaris Vm Server

References