Ubuntu 10.04 LTS / 11.04 / 11.10 : nss vulnerability (USN-1540-1)

Kaspar Brand discovered a vulnerability in how the Network Security Services NSS ASN.1 decoder handles zero length items. If the user were tricked into opening a specially crafted certificate, an attacker could possibly exploit this to cause a denial of service via application crash. Note that...