NVD

Id
27868  
Name
CVE-2015-7181  
Description
The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, improperly restricts access to an unspecified data structure, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data, related to a "use-after-poison" issue.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-11-05  
Modified Date
2016-12-07  
Seq
2015-7181  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
146253 27868 CVE-2015-7181 SUSE-SU-2015:1926  View
146254 27868 CVE-2015-7181 openSUSE-SU-2015:1942  View
146255 27868 CVE-2015-7181 SUSE-SU-2015:1978  View
146256 27868 CVE-2015-7181 SUSE-SU-2015:1981  View
146257 27868 CVE-2015-7181 SUSE-SU-2015:2081  View
146258 27868 CVE-2015-7181 openSUSE-SU-2015:2229  View
146259 27868 CVE-2015-7181 openSUSE-SU-2015:2245  View
146260 27868 CVE-2015-7181 http://packetstormsecurity.com/files/134268/Slackware-Security-Advisory-mozilla-nss-Updates.html  View
146261 27868 CVE-2015-7181 RHSA-2015:1980  View
146262 27868 CVE-2015-7181 RHSA-2015:1981  View
146263 27868 CVE-2015-7181 DSA-3393  View
146264 27868 CVE-2015-7181 DSA-3410  View
146265 27868 CVE-2015-7181 http://www.mozilla.org/security/announce/2015/mfsa2015-133.html  View
146266 27868 CVE-2015-7181 http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html  View
146267 27868 CVE-2015-7181 http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html  View
146268 27868 CVE-2015-7181 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
146269 27868 CVE-2015-7181 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
146270 27868 CVE-2015-7181 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
146271 27868 CVE-2015-7181 77416  View
146272 27868 CVE-2015-7181 91787  View
146273 27868 CVE-2015-7181 1034069  View
146274 27868 CVE-2015-7181 SSA:2015-310-02  View
146275 27868 CVE-2015-7181 USN-2785-1  View
146276 27868 CVE-2015-7181 USN-2791-1  View
146277 27868 CVE-2015-7181 USN-2819-1  View
146278 27868 CVE-2015-7181 https://bto.bluecoat.com/security-advisory/sa119  View
146279 27868 CVE-2015-7181 https://bugzilla.mozilla.org/show_bug.cgi?id=1192028  View
146280 27868 CVE-2015-7181 https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.1_release_notes  View
146281 27868 CVE-2015-7181 https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.4_release_notes  View
146282 27868 CVE-2015-7181 https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.1_release_notes  View
146283 27868 CVE-2015-7181 GLSA-201512-10  View
146284 27868 CVE-2015-7181 GLSA-201605-06  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10425 JVNDB-2015-005745 Mozilla Firefox などの製品で使用される Network Security Services におけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox およびその他の製品で使用される Network Security Services (NSS) の sec_asn1d_parse_leaf 関数は、不特定のデータ構成へのアクセスを適切に制限しないため、サービス運用妨害 (アプリケーションクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2015-7181 84406 CVE-2015-7181 27868 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005745.html 2015-11-03 2016-11-22 View