CVE-2014-1492

The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.

• mozilla network security services (<= 3.15.5) • mozilla network security services 3.2 • mozilla network security services 3.2.1 • mozilla network security services 3.3 • mozilla network security services 3.3.1 • mozilla network security services 3.3.2 • mozilla network security services 3.4 • mozilla network security services 3.4.1 • mozilla network security services 3.4.2 • mozilla network security services 3.5 • mozilla network security services 3.6 • mozilla network security services 3.6.1 • mozilla network security services 3.7 • mozilla network security services 3.7.1 • mozilla network security services 3.7.2 • mozilla network security services 3.7.3 • mozilla network security services 3.7.5 • mozilla network security services 3.7.7 • mozilla network security services 3.8 • mozilla network security services 3.9 • mozilla network security services 3.11.2 • mozilla network security services 3.11.3 • mozilla network security services 3.11.4 • mozilla network security services 3.11.5 • mozilla network security services 3.12 • mozilla network security services 3.12.1 • mozilla network security services 3.12.2 • mozilla network security services 3.12.3 • mozilla network security services 3.12.3.1 • mozilla network security services 3.12.3.2 • mozilla network security services 3.12.4 • mozilla network security services 3.12.5 • mozilla network security services 3.12.6 • mozilla network security services 3.12.7 • mozilla network security services 3.12.8 • mozilla network security services 3.12.9 • mozilla network security services 3.12.10 • mozilla network security services 3.12.11 • mozilla network security services 3.14 • mozilla network security services 3.14.1 • mozilla network security services 3.14.2 • mozilla network security services 3.14.3 • mozilla network security services 3.14.4 • mozilla network security services 3.14.5 • mozilla network security services 3.15 • mozilla network security services 3.15.1 • mozilla network security services 3.15.2 • mozilla network security services 3.15.3 • mozilla network security services 3.15.3.1 • mozilla network security services 3.15.4