CVE

Id
84459  
CVE No.
CVE-2015-7182  
Status
Candidate  
Description
Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data.  
Phase
Assigned (20150916)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
748074 84459 CVE-2015-7182 MISC:http://packetstormsecurity.com/files/134268/Slackware-Security-Advisory-mozilla-nss-Updates.html  View
748075 84459 CVE-2015-7182 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-133.html  View
748076 84459 CVE-2015-7182 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1202868  View
748077 84459 CVE-2015-7182 CONFIRM:https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.1_release_notes  View
748078 84459 CVE-2015-7182 CONFIRM:https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.4_release_notes  View
748079 84459 CVE-2015-7182 CONFIRM:https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.1_release_notes  View
748080 84459 CVE-2015-7182 CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html  View
748081 84459 CVE-2015-7182 CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html  View
748082 84459 CVE-2015-7182 CONFIRM:http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
748083 84459 CVE-2015-7182 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
748084 84459 CVE-2015-7182 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
748085 84459 CVE-2015-7182 CONFIRM:https://bto.bluecoat.com/security-advisory/sa119  View
748086 84459 CVE-2015-7182 DEBIAN:DSA-3410  View
748087 84459 CVE-2015-7182 URL:http://www.debian.org/security/2015/dsa-3410  View
748088 84459 CVE-2015-7182 DEBIAN:DSA-3393  View
748089 84459 CVE-2015-7182 URL:http://www.debian.org/security/2015/dsa-3393  View
748090 84459 CVE-2015-7182 GENTOO:GLSA-201605-06  View
748091 84459 CVE-2015-7182 URL:https://security.gentoo.org/glsa/201605-06  View
748092 84459 CVE-2015-7182 GENTOO:GLSA-201512-10  View
748093 84459 CVE-2015-7182 URL:https://security.gentoo.org/glsa/201512-10  View
748094 84459 CVE-2015-7182 REDHAT:RHSA-2015:1980  View
748095 84459 CVE-2015-7182 URL:http://rhn.redhat.com/errata/RHSA-2015-1980.html  View
748096 84459 CVE-2015-7182 REDHAT:RHSA-2015:1981  View
748097 84459 CVE-2015-7182 URL:http://rhn.redhat.com/errata/RHSA-2015-1981.html  View
748098 84459 CVE-2015-7182 SLACKWARE:SSA:2015-310-02  View
748099 84459 CVE-2015-7182 URL:http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.399753  View
748100 84459 CVE-2015-7182 SUSE:openSUSE-SU-2015:2229  View
748101 84459 CVE-2015-7182 URL:http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html  View
748102 84459 CVE-2015-7182 SUSE:openSUSE-SU-2015:2245  View
748103 84459 CVE-2015-7182 URL:http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html  View
748104 84459 CVE-2015-7182 SUSE:SUSE-SU-2015:1926  View
748105 84459 CVE-2015-7182 URL:http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html  View
748106 84459 CVE-2015-7182 SUSE:openSUSE-SU-2015:1942  View
748107 84459 CVE-2015-7182 URL:http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html  View
748108 84459 CVE-2015-7182 SUSE:SUSE-SU-2015:1978  View
748109 84459 CVE-2015-7182 URL:http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html  View
748110 84459 CVE-2015-7182 SUSE:SUSE-SU-2015:1981  View
748111 84459 CVE-2015-7182 URL:http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html  View
748112 84459 CVE-2015-7182 SUSE:SUSE-SU-2015:2081  View
748113 84459 CVE-2015-7182 URL:http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html  View
748114 84459 CVE-2015-7182 UBUNTU:USN-2819-1  View
748115 84459 CVE-2015-7182 URL:http://www.ubuntu.com/usn/USN-2819-1  View
748116 84459 CVE-2015-7182 UBUNTU:USN-2785-1  View
748117 84459 CVE-2015-7182 URL:http://www.ubuntu.com/usn/USN-2785-1  View
748118 84459 CVE-2015-7182 UBUNTU:USN-2791-1  View
748119 84459 CVE-2015-7182 URL:http://www.ubuntu.com/usn/USN-2791-1  View
748120 84459 CVE-2015-7182 BID:91787  View
748121 84459 CVE-2015-7182 URL:http://www.securityfocus.com/bid/91787  View
748122 84459 CVE-2015-7182 BID:77416  View
748123 84459 CVE-2015-7182 URL:http://www.securityfocus.com/bid/77416  View
748124 84459 CVE-2015-7182 SECTRACK:1034069  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
9593 JVNDB-2015-004913 Drupal 用 OSF モジュールにおける任意のファイルを削除される脆弱性 Drupal 用 OSF モジュールには、OSF Ontology および OSF Import モジュールが有効になっている場合、任意のファイルを削除される脆弱性が存在します。 CVE-2015-7234 84459 4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004913.html  View