3 matches found
Firefox ESR Data Compromise
The use of this function after release in CERTDestroyCertificate in libnss3.so within the NSS Mozilla library for Firefox ESR allows malicious actors operating remotely to execute arbitrary code, thereby improperly deleting the NSSCertificate structure from the trusted domain...
Firefox Data Compromise
The use of this function after liberation in CERTDestroyCertificate in libnss3.so within the NSS Mozilla library for Firefox allows malicious actors operating remotely to execute arbitrary code, thereby improperly deleting the NSSCertificate structure from the trusted domain...
DEBIAN-CVE-2014-1544
Use-after-free vulnerability in the CERTDestroyCertificate function in libnss3.so in Mozilla Network Security Services NSS 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger...