2014-07-23 13:12:42 2017-01-07 03:59:38

Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE
Mozilla Network Security Services 3.15.1 Mozilla Network Security Services 3.7.2 Mozilla Network Security Services 3.11.5 Mozilla Network Security Services 3.7.3 Mozilla Network Security Services 3.11.3 Mozilla Network Security Services 3.15.2 Mozilla Network Security Services 3.7.5 Mozilla Network Security Services 3.11.4 Mozilla Thunderbird 24.4 Mozilla Thunderbird 24.1 Mozilla Thunderbird 24.0 Mozilla Thunderbird 24.3 Mozilla Thunderbird 24.6 Mozilla Thunderbird 24.2 Mozilla Thunderbird 24.5 Mozilla Thunderbird 24.0.1 Mozilla Network Security Services 3.11.2 Mozilla Network Security Services 3.7.1 Mozilla Network Security Services 3.3.2 Mozilla Firefox 30.0 Mozilla Network Security Services 3.3.1 Mozilla Network Security Services 3.15.3.1 Mozilla Firefox Extended Support Release (ESR) 24.1.1 Mozilla Network Security Services 3.12.3.2 Mozilla Firefox Extended Support Release (ESR) 24.1.0 Mozilla Network Security Services 3.12.3.1 Mozilla Network Security Services 3.12.8 Mozilla Network Security Services 3.12.9 Mozilla Network Security Services 3.14.4 Mozilla Network Security Services 3.12.6 Mozilla Network Security Services 3.14.5 Mozilla Network Security Services 3.12.7 Mozilla Network Security Services 3.14.2 Mozilla Network Security Services 3.14.3 Mozilla Network Security Services 3.12.4 Mozilla Network Security Services 3.12.5 Mozilla Network Security Services 3.12.2 Mozilla Network Security Services 3.14.1 Mozilla Firefox Extended Support Release (ESR) 24.3 Mozilla Network Security Services 3.12.3 Mozilla Firefox Extended Support Release (ESR) 24.2 Mozilla Network Security Services 3.16 Mozilla Firefox Extended Support Release (ESR) 24.5 Mozilla Firefox Extended Support Release (ESR) 24.4 Mozilla Network Security Services 3.12.10 Mozilla Firefox Extended Support Release (ESR) 24.6 Mozilla Firefox Extended Support Release (ESR) 24.0 Mozilla Network Security Services 3.12.11 Mozilla Thunderbird 24.1.1 Mozilla Network Security Services 3.4.1 Mozilla Network Security Services 3.4.2 Mozilla Network Security Services 3.12.1 Mozilla Network Security Services 3.6.1 Mozilla Network Security Services 3.2.1 Mozilla Firefox Extended Support Release (ESR) 24.0.2 Mozilla Network Security Services 3.2 Mozilla Network Security Services 3.6 Mozilla Network Security Services 3.14 Mozilla Network Security Services 3.5 Mozilla Network Security Services 3.15 Mozilla Network Security Services 3.4 Mozilla Network Security Services 3.12 Mozilla Network Security Services 3.3 Mozilla Firefox Extended Support Release (ESR) 24.0.1 Mozilla Network Security Services 3.9 Mozilla Network Security Services 3.8 Mozilla Network Security Services 3.7 Mozilla Network Security Services 3.15.5 Mozilla Network Security Services 3.7.7 Mozilla Network Security Services 3.15.4 Mozilla Network Security Services 3.15.3