CVE

Id
68879  
CVE No.
CVE-2014-1584  
Status
Candidate  
Description
The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to presentation of the Untrusted Connection dialog to the user.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
662779 68879 CVE-2014-1584 CONFIRM:http://www.mozilla.org/security/announce/2014/mfsa2014-80.html  View
662780 68879 CVE-2014-1584 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1066190  View
662781 68879 CVE-2014-1584 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
662782 68879 CVE-2014-1584 FEDORA:FEDORA-2014-13042  View
662783 68879 CVE-2014-1584 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html  View
662784 68879 CVE-2014-1584 FEDORA:FEDORA-2014-14084  View
662785 68879 CVE-2014-1584 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html  View
662786 68879 CVE-2014-1584 GENTOO:GLSA-201504-01  View
662787 68879 CVE-2014-1584 URL:https://security.gentoo.org/glsa/201504-01  View
662788 68879 CVE-2014-1584 SUSE:openSUSE-SU-2014:1344  View
662789 68879 CVE-2014-1584 URL:http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html  View
662790 68879 CVE-2014-1584 SUSE:openSUSE-SU-2014:1345  View
662791 68879 CVE-2014-1584 URL:http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html  View
662792 68879 CVE-2014-1584 UBUNTU:USN-2372-1  View
662793 68879 CVE-2014-1584 URL:http://www.ubuntu.com/usn/USN-2372-1  View
662794 68879 CVE-2014-1584 BID:70434  View
662795 68879 CVE-2014-1584 URL:http://www.securityfocus.com/bid/70434  View
662796 68879 CVE-2014-1584 SECTRACK:1031028  View
662797 68879 CVE-2014-1584 URL:http://www.securitytracker.com/id/1031028  View
662798 68879 CVE-2014-1584 SECUNIA:62022  View
662799 68879 CVE-2014-1584 URL:http://secunia.com/advisories/62022  View
662800 68879 CVE-2014-1584 SECUNIA:62023  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
17027 JVNDB-2014-005902 複数の Mozilla 製品の xul.dll の nsHtml5TreeOperation 関数における任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の xul.dll の nsHtml5TreeOperation 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2014-1592 68879 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005902.html  View