CVEvulnerability
CVE-2014-1544
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-07-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.
Affected configurations
• mozilla firefox (<= 30.0)
• mozilla firefox 24.0
• mozilla firefox 24.0.1
• mozilla firefox 24.0.2
• mozilla firefox 24.1.0
• mozilla firefox 24.1.1
• mozilla firefox esr 24.2
• mozilla firefox esr 24.3
• mozilla firefox esr 24.4
• mozilla firefox esr 24.5
• mozilla firefox esr 24.6
• mozilla network security services 3.2
• mozilla network security services 3.2.1
• mozilla network security services 3.3
• mozilla network security services 3.3.1
• mozilla network security services 3.3.2
• mozilla network security services 3.4
• mozilla network security services 3.4.1
• mozilla network security services 3.4.2
• mozilla network security services 3.5
• mozilla network security services 3.6
• mozilla network security services 3.6.1
• mozilla network security services 3.7
• mozilla network security services 3.7.1
• mozilla network security services 3.7.2
• mozilla network security services 3.7.3
• mozilla network security services 3.7.5
• mozilla network security services 3.7.7
• mozilla network security services 3.8
• mozilla network security services 3.9
• mozilla network security services 3.11.2
• mozilla network security services 3.11.3
• mozilla network security services 3.11.4
• mozilla network security services 3.11.5
• mozilla network security services 3.12
• mozilla network security services 3.12.1
• mozilla network security services 3.12.2
• mozilla network security services 3.12.3
• mozilla network security services 3.12.3.1
• mozilla network security services 3.12.3.2
• mozilla network security services 3.12.4
• mozilla network security services 3.12.5
• mozilla network security services 3.12.6
• mozilla network security services 3.12.7
• mozilla network security services 3.12.8
• mozilla network security services 3.12.9
• mozilla network security services 3.12.10
• mozilla network security services 3.12.11
• mozilla network security services 3.14
• mozilla network security services 3.14.1
• mozilla network security services 3.14.2
• mozilla network security services 3.14.3
• mozilla network security services 3.14.4
• mozilla network security services 3.14.5
• mozilla network security services 3.15
• mozilla network security services 3.15.1
• mozilla network security services 3.15.2
• mozilla network security services 3.15.3
• mozilla network security services 3.15.3.1
• mozilla network security services 3.15.4
… and 11 more
References
- http://secunia.com/advisories/59591 secunia.com
- http://secunia.com/advisories/59719 secunia.com
- http://secunia.com/advisories/59760 secunia.com
- http://secunia.com/advisories/60083 secunia.com
- http://secunia.com/advisories/60486 secunia.com
- http://secunia.com/advisories/60621 secunia.com
- http://secunia.com/advisories/60628 secunia.com
- http://www.debian.org/security/2014/dsa-2986 www.debian.org
- http://www.debian.org/security/2014/dsa-2996 www.debian.org
- http://www.mozilla.org/security/announce/2014/mfsa2014-63.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html www.oracle.com
- http://www.securityfocus.com/bid/68816 www.securityfocus.com
- http://www.securitytracker.com/id/1030617 www.securitytracker.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=963150 bugzilla.mozilla.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org
- http://secunia.com/advisories/59591 secunia.com
- http://secunia.com/advisories/59719 secunia.com
- http://secunia.com/advisories/59760 secunia.com
- http://secunia.com/advisories/60083 secunia.com
- http://secunia.com/advisories/60486 secunia.com
- http://secunia.com/advisories/60621 secunia.com
- http://secunia.com/advisories/60628 secunia.com
- http://www.debian.org/security/2014/dsa-2986 www.debian.org
- http://www.debian.org/security/2014/dsa-2996 www.debian.org
- http://www.mozilla.org/security/announce/2014/mfsa2014-63.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html www.oracle.com
- http://www.securityfocus.com/bid/68816 www.securityfocus.com
- http://www.securitytracker.com/id/1030617 www.securitytracker.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=963150 bugzilla.mozilla.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org