Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-1498
HistoryMar 19, 2014 - 10:55 a.m.

CVE-2014-1498

2014-03-1910:55:06
CWE-347
[email protected]
web.nvd.nist.gov
44
cve-2014-1498
mozilla firefox
seamonkey
crypto.generatecrmfrequest
denial of service
key validation
elliptic curve
ec-dual-use algorithm

8.8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.029 Low

EPSS

Percentile

90.8%

JSON

The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to cause a denial of service (application crash) via vectors that trigger generation of a key that supports the Elliptic Curve ec-dual-use algorithm.

Affected configurations

NVD
Node
suselinux_enterprise_desktopMatch11sp3
OR
suselinux_enterprise_serverMatch11sp3
OR
suselinux_enterprise_serverMatch11sp3vmware
OR
suselinux_enterprise_software_development_kitMatch11sp3
Node
oraclesolarisMatch11.3
Node
opensuseopensuseMatch13.1
OR
opensuse_projectopensuseMatch11.4
OR
opensuse_projectopensuseMatch12.3
Node
mozillaseamonkeyRange<2.25
Node
mozillafirefoxRange<28.0

Related

cvelist 1
prion 1
mozilla 1
openvas 18
ubuntucve 1
nvd 1
seebug 1
suse 5
nessus 9
ubuntu 1
mageia 1
freebsd 1
securityvulns 1
gentoo 1
cvelist
cvelist
CVE-2014-1498
2014-03-19 10:00:00
prion
prion
Design/Logic Flaw
2014-03-19 10:55:00
mozilla
mozilla
crypto.generateCRMFRequest does not validate type of key — Mozilla
2014-03-18 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2014-18) - Linux
2021-11-11 00:00:00
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2014:0448-1)
2014-04-03 00:00:00
openSUSE: Security Advisory for MozillaThunderbird, seamonkey (openSUSE-SU-2014:0584-1)
2014-05-05 00:00:00
ubuntucve
ubuntucve
CVE-2014-1498
2014-03-18 00:00:00
nvd
nvd
CVE-2014-1498
2014-03-19 10:55:06
seebug
seebug
Mozilla多个产品crypto.generateCRMFRequest拒绝服务漏洞
2014-03-21 00:00:00
suse
suse
MozillaFirefox: Update to version 28.0 (important)
2014-03-26 17:04:14
MozillaThunderbird,seamonkey (important)
2014-04-30 09:04:15
Security update for MozillaFirefox (important)
2014-03-21 23:04:18
nessus
nessus
openSUSE Security Update : MozillaFirefox (openSUSE-SU-2014:0448-1)
2014-06-13 00:00:00
openSUSE Security Update : MozillaThunderbird / seamonkey (openSUSE-SU-2014:0584-1)
2014-06-13 00:00:00
Firefox < 28.0 Multiple Vulnerabilities (Mac OS X)
2014-03-19 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2014-03-18 00:00:00
mageia
mageia
Updated iceape packages fix multiple vulnerabilities
2014-03-31 23:47:52
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-03-19 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey / nss multiple security vulnerabilities
2014-03-27 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00

8.8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.029 Low

EPSS

Percentile

90.8%

JSON
Related for CVE-2014-1498
cvelist1prion1mozilla1openvas18ubuntucve1nvd1seebug1suse5nessus9ubuntu1mageia1freebsd1securityvulns1gentoo1