NVD

Id
24732  
Name
CVE-2015-2730  
Description
Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-07-05  
Modified Date
2016-12-27  
Seq
2015-2730  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
130381 24732 CVE-2015-2730 openSUSE-SU-2015:1229  View
130382 24732 CVE-2015-2730 openSUSE-SU-2015:1266  View
130383 24732 CVE-2015-2730 SUSE-SU-2015:1268  View
130384 24732 CVE-2015-2730 SUSE-SU-2015:1269  View
130385 24732 CVE-2015-2730 SUSE-SU-2015:1449  View
130386 24732 CVE-2015-2730 RHSA-2015:1664  View
130387 24732 CVE-2015-2730 RHSA-2015:1699  View
130388 24732 CVE-2015-2730 DSA-3336  View
130389 24732 CVE-2015-2730 http://www.mozilla.org/security/announce/2015/mfsa2015-64.html  View
130390 24732 CVE-2015-2730 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
130391 24732 CVE-2015-2730 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
130392 24732 CVE-2015-2730 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
130393 24732 CVE-2015-2730 75541  View
130394 24732 CVE-2015-2730 83399  View
130395 24732 CVE-2015-2730 1032783  View
130396 24732 CVE-2015-2730 USN-2656-1  View
130397 24732 CVE-2015-2730 USN-2656-2  View
130398 24732 CVE-2015-2730 USN-2672-1  View
130399 24732 CVE-2015-2730 https://bugzilla.mozilla.org/show_bug.cgi?id=1125025  View
130400 24732 CVE-2015-2730 https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes  View
130401 24732 CVE-2015-2730 GLSA-201512-10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8125 JVNDB-2015-003445 Mozilla Firefox などの製品で使用される Mozilla Network Security Services における ECDSA 署名を偽装される脆弱性 Mozilla Firefox およびその他の製品で使用される Mozilla Network Security Services (NSS) は、楕円曲線暗号 (ECC) 乗法を適切に実行しないため、ECDSA 署名を偽装される脆弱性が存在します。 CVE-2015-2730 79955 CVE-2015-2730 24732 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003445.html 2015-07-02 2015-11-06 View