NVD

Id
42536  
Name
CVE-2012-0441  
Description
The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13.4, as used in Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10, allows remote attackers to cause a denial of service (application crash) via a zero-length item, as demonstrated by (1) a zero-length basic constraint or (2) a zero-length field in an OCSP response.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-06-05  
Modified Date
2016-09-08  
Seq
2012-0441  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
214244 42536 CVE-2012-0441 oval:org.mitre.oval:def:16701  View
214245 42536 CVE-2012-0441 http://www.mozilla.org/security/announce/2012/mfsa2012-39.html  View
214246 42536 CVE-2012-0441 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
214247 42536 CVE-2012-0441 53798  View
214248 42536 CVE-2012-0441 USN-1540-1  View
214249 42536 CVE-2012-0441 USN-1540-2  View
214250 42536 CVE-2012-0441 https://bugzilla.mozilla.org/show_bug.cgi?id=715073  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26901 JVNDB-2012-002608 Mozilla Network Security Services の ASN.1 デコーダにおけるサービス運用妨害 (DoS) の脆弱性 複数の Mozilla 製品で使用される Mozilla Network Security Services (NSS) の QuickDER デコーダ内の ASN.1 デコーダには、サービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2012-0441 53679 CVE-2012-0441 42536 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002608.html 2012-06-05 2012-12-26 View