NVD

Id
30169  
Name
CVE-2014-1544  
Description
Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-07-23  
Modified Date
2017-01-06  
Seq
2014-1544  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
159303 30169 CVE-2014-1544 59591  View
159304 30169 CVE-2014-1544 59719  View
159305 30169 CVE-2014-1544 59760  View
159306 30169 CVE-2014-1544 60083  View
159307 30169 CVE-2014-1544 60486  View
159308 30169 CVE-2014-1544 60621  View
159309 30169 CVE-2014-1544 60628  View
159310 30169 CVE-2014-1544 DSA-2986  View
159311 30169 CVE-2014-1544 DSA-2996  View
159312 30169 CVE-2014-1544 http://www.mozilla.org/security/announce/2014/mfsa2014-63.html  View
159313 30169 CVE-2014-1544 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
159314 30169 CVE-2014-1544 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
159315 30169 CVE-2014-1544 68816  View
159316 30169 CVE-2014-1544 1030617  View
159317 30169 CVE-2014-1544 https://bugzilla.mozilla.org/show_bug.cgi?id=963150  View
159318 30169 CVE-2014-1544 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14651 JVNDB-2014-003526 Firefox および Thunderbird で使用される Mozilla Network Security Services の libnss3.so における任意のコードを実行される脆弱性 Firefox および Thunderbird で使用される Mozilla Network Security Services (NSS) の libnss3.so の CERT_DestroyCertificate 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2014-1544 68831 CVE-2014-1544 30169 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003526.html 2014-07-22 2014-07-24 View