Lucene search

K
nvd[email protected]NVD:CVE-2014-1559
HistoryJul 23, 2014 - 11:12 a.m.

CVE-2014-1559

2014-07-2311:12:43
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.1 Medium

AI Score

Confidence

Low

0.028 Low

EPSS

Percentile

90.6%

Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-2014-1558.

Affected configurations

NVD
Node
mozillafirefoxRange30.0
OR
mozillathunderbirdRange24.7
OR
mozillathunderbirdMatch24.0
OR
mozillathunderbirdMatch24.0.1
OR
mozillathunderbirdMatch24.1
OR
mozillathunderbirdMatch24.1.1
OR
mozillathunderbirdMatch24.2
OR
mozillathunderbirdMatch24.3
OR
mozillathunderbirdMatch24.4
OR
mozillathunderbirdMatch24.5
OR
mozillathunderbirdMatch24.6

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.1 Medium

AI Score

Confidence

Low

0.028 Low

EPSS

Percentile

90.6%