NetSight
IP …
medium5.0

CVE-2013-0791

The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunder…

Impact

The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.

Affected products

VendorProductAffected versions
MozillaFirefox
through 20.0
from 17.0 before 17.0.5
MozillaNetwork Security Services
before 3.15
MozillaSeamonkey
before 2.17
MozillaThunderbird
before 17.0.5
MozillaThunderbird Esr
from 17.0 before 17.0.5
CanonicalUbuntu Linux
Versions 10.04, 11.10, 12.04, 12.10
OracleVm Server
Version 3.2
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Version 5.9
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Server Aus
Version 5.9
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0

Weakness classification

CWE-119

References