NVD

Id
27869  
Name
CVE-2015-7182  
Description
Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-11-05  
Modified Date
2016-12-07  
Seq
2015-7182  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
146285 27869 CVE-2015-7182 SUSE-SU-2015:1926  View
146286 27869 CVE-2015-7182 openSUSE-SU-2015:1942  View
146287 27869 CVE-2015-7182 SUSE-SU-2015:1978  View
146288 27869 CVE-2015-7182 SUSE-SU-2015:1981  View
146289 27869 CVE-2015-7182 SUSE-SU-2015:2081  View
146290 27869 CVE-2015-7182 openSUSE-SU-2015:2229  View
146291 27869 CVE-2015-7182 openSUSE-SU-2015:2245  View
146292 27869 CVE-2015-7182 http://packetstormsecurity.com/files/134268/Slackware-Security-Advisory-mozilla-nss-Updates.html  View
146293 27869 CVE-2015-7182 RHSA-2015:1980  View
146294 27869 CVE-2015-7182 RHSA-2015:1981  View
146295 27869 CVE-2015-7182 DSA-3393  View
146296 27869 CVE-2015-7182 DSA-3410  View
146297 27869 CVE-2015-7182 http://www.mozilla.org/security/announce/2015/mfsa2015-133.html  View
146298 27869 CVE-2015-7182 http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html  View
146299 27869 CVE-2015-7182 http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html  View
146300 27869 CVE-2015-7182 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
146301 27869 CVE-2015-7182 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
146302 27869 CVE-2015-7182 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
146303 27869 CVE-2015-7182 77416  View
146304 27869 CVE-2015-7182 91787  View
146305 27869 CVE-2015-7182 1034069  View
146306 27869 CVE-2015-7182 SSA:2015-310-02  View
146307 27869 CVE-2015-7182 USN-2785-1  View
146308 27869 CVE-2015-7182 USN-2791-1  View
146309 27869 CVE-2015-7182 USN-2819-1  View
146310 27869 CVE-2015-7182 https://bto.bluecoat.com/security-advisory/sa119  View
146311 27869 CVE-2015-7182 https://bugzilla.mozilla.org/show_bug.cgi?id=1202868  View
146312 27869 CVE-2015-7182 https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.1_release_notes  View
146313 27869 CVE-2015-7182 https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.4_release_notes  View
146314 27869 CVE-2015-7182 https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.1_release_notes  View
146315 27869 CVE-2015-7182 GLSA-201512-10  View
146316 27869 CVE-2015-7182 GLSA-201605-06  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10426 JVNDB-2015-005746 Mozilla Firefox などの製品で使用される Network Security Services におけるヒープベースのバッファオーバーフローの脆弱性 Mozilla Firefox およびその他の製品で使用される Network Security Services (NSS) の ASN.1 デコーダには、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2015-7182 84407 CVE-2015-7182 27869 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005746.html 2015-11-03 2016-07-27 View