Beveiligingsadvies

CVE-2014-1498

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-03-19 10:00:00

Laatst bijgewerkt 2024-08-06 09:42:36

Toegewezen door mozilla

CVSS-score geen score

Status PUBLISHED

Beschrijving

The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to cause a denial of service (application crash) via vectors that trigger generation of a key that supports the Elliptic Curve ec-dual-use algorithm.

← Alle CVE's bekijken Bekijk op cve.org ↗