NetSight
IP …
high8.8

CVE-2016-1950

Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45…

Impact

Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.

Affected products

VendorProductAffected versions
MozillaNetwork Security Services
Versions 3.19.2, 3.20, 3.20.1, 3.21
MozillaFirefox
through 44.0.2
Versions 38.0, 38.0.1, 38.0.5, 38.1.0, 38.1.1
OracleLinux
Versions 5.0, 6, 7
OracleVm Server
Version 3.2
AppleIphone Os
through 9.2.1
AppleMac Os X
through 10.11.3
AppleTvos
through 9.1
AppleWatchos
through 2.1
OracleGlassfish Server
Version 2.1.1
OracleIplanet Web Proxy Server
Version 4.0
OracleIplanet Web Server
Version 7.0
OpensuseOpensuse
Version 13.1

Weakness classification

CWE-119

References