NVD

Id
18264  
Name
CVE-2016-1950  
Description
Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-03-13  
Modified Date
2016-12-02  
Seq
2016-1950  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
100890 18264 CVE-2016-1950 APPLE-SA-2016-03-21-1  View
100891 18264 CVE-2016-1950 APPLE-SA-2016-03-21-2  View
100892 18264 CVE-2016-1950 APPLE-SA-2016-03-21-3  View
100893 18264 CVE-2016-1950 APPLE-SA-2016-03-21-5  View
100894 18264 CVE-2016-1950 SUSE-SU-2016:0727  View
100895 18264 CVE-2016-1950 openSUSE-SU-2016:0731  View
100896 18264 CVE-2016-1950 openSUSE-SU-2016:0733  View
100897 18264 CVE-2016-1950 SUSE-SU-2016:0777  View
100898 18264 CVE-2016-1950 SUSE-SU-2016:0820  View
100899 18264 CVE-2016-1950 SUSE-SU-2016:0909  View
100900 18264 CVE-2016-1950 openSUSE-SU-2016:1557  View
100901 18264 CVE-2016-1950 RHSA-2016:0495  View
100902 18264 CVE-2016-1950 DSA-3510  View
100903 18264 CVE-2016-1950 DSA-3520  View
100904 18264 CVE-2016-1950 http://www.mozilla.org/security/announce/2016/mfsa2016-35.html  View
100905 18264 CVE-2016-1950 http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
100906 18264 CVE-2016-1950 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
100907 18264 CVE-2016-1950 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
100908 18264 CVE-2016-1950 84223  View
100909 18264 CVE-2016-1950 1035215  View
100910 18264 CVE-2016-1950 USN-2917-1  View
100911 18264 CVE-2016-1950 USN-2917-2  View
100912 18264 CVE-2016-1950 USN-2917-3  View
100913 18264 CVE-2016-1950 USN-2924-1  View
100914 18264 CVE-2016-1950 USN-2934-1  View
100915 18264 CVE-2016-1950 https://bto.bluecoat.com/security-advisory/sa119  View
100916 18264 CVE-2016-1950 https://bugzilla.mozilla.org/show_bug.cgi?id=1245528  View
100917 18264 CVE-2016-1950 https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.3_release_notes  View
100918 18264 CVE-2016-1950 https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes  View
100919 18264 CVE-2016-1950 GLSA-201605-06  View
100920 18264 CVE-2016-1950 https://support.apple.com/HT206166  View
100921 18264 CVE-2016-1950 https://support.apple.com/HT206167  View
100922 18264 CVE-2016-1950 https://support.apple.com/HT206168  View
100923 18264 CVE-2016-1950 https://support.apple.com/HT206169  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1068 JVNDB-2016-001841 Mozilla Firefox で使用される Network Security Services におけるヒープベースのバッファオーバーフローの脆弱性 Mozilla Firefox で使用される Network Security Services (NSS) には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2016-1950 88456 CVE-2016-1950 18264 6.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001841.html 2016-03-08 2016-11-22 View