CVE-2014-1498

Currently unrated

Key Information:

Vendor
Suse
Status
Linux Enterprise Desktop
Linux Enterprise Server
Linux Enterprise Software Development Kit
Vendor
CVE Published:
19 March 2014

Summary

The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to cause a denial of service (application crash) via vectors that trigger generation of a key that supports the Elliptic Curve ec-dual-use algorithm.

References

http://www.mozilla.org/security/announce/2014/mfsa2014-18...
x_refsource_CONFIRM
https://security.gentoo.org/glsa/201504-01
vendor-advisoryx_refsource_GENTOO
http://lists.opensuse.org/opensuse-security-announce/2014...
vendor-advisoryx_refsource_SUSE

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.