Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Firefox | Mozilla | * | 30.0 (including) |
Firefox_esr | Mozilla | 24.0 (including) | 24.0 (including) |
Firefox_esr | Mozilla | 24.0.1 (including) | 24.0.1 (including) |
Firefox_esr | Mozilla | 24.0.2 (including) | 24.0.2 (including) |
Firefox_esr | Mozilla | 24.1.0 (including) | 24.1.0 (including) |
Firefox_esr | Mozilla | 24.1.1 (including) | 24.1.1 (including) |
Firefox_esr | Mozilla | 24.2 (including) | 24.2 (including) |
Firefox_esr | Mozilla | 24.3 (including) | 24.3 (including) |
Firefox_esr | Mozilla | 24.4 (including) | 24.4 (including) |
Firefox_esr | Mozilla | 24.5 (including) | 24.5 (including) |
Firefox_esr | Mozilla | 24.6 (including) | 24.6 (including) |
Network_security_services | Mozilla | 3.2 (including) | 3.2 (including) |
Network_security_services | Mozilla | 3.2.1 (including) | 3.2.1 (including) |
Network_security_services | Mozilla | 3.3 (including) | 3.3 (including) |
Network_security_services | Mozilla | 3.3.1 (including) | 3.3.1 (including) |
Network_security_services | Mozilla | 3.3.2 (including) | 3.3.2 (including) |
Network_security_services | Mozilla | 3.4 (including) | 3.4 (including) |
Network_security_services | Mozilla | 3.4.1 (including) | 3.4.1 (including) |
Network_security_services | Mozilla | 3.4.2 (including) | 3.4.2 (including) |
Network_security_services | Mozilla | 3.5 (including) | 3.5 (including) |
Network_security_services | Mozilla | 3.6 (including) | 3.6 (including) |
Network_security_services | Mozilla | 3.6.1 (including) | 3.6.1 (including) |
Network_security_services | Mozilla | 3.7 (including) | 3.7 (including) |
Network_security_services | Mozilla | 3.7.1 (including) | 3.7.1 (including) |
Network_security_services | Mozilla | 3.7.2 (including) | 3.7.2 (including) |
Network_security_services | Mozilla | 3.7.3 (including) | 3.7.3 (including) |
Network_security_services | Mozilla | 3.7.5 (including) | 3.7.5 (including) |
Network_security_services | Mozilla | 3.7.7 (including) | 3.7.7 (including) |
Network_security_services | Mozilla | 3.8 (including) | 3.8 (including) |
Network_security_services | Mozilla | 3.9 (including) | 3.9 (including) |
Network_security_services | Mozilla | 3.11.2 (including) | 3.11.2 (including) |
Network_security_services | Mozilla | 3.11.3 (including) | 3.11.3 (including) |
Network_security_services | Mozilla | 3.11.4 (including) | 3.11.4 (including) |
Network_security_services | Mozilla | 3.11.5 (including) | 3.11.5 (including) |
Network_security_services | Mozilla | 3.12 (including) | 3.12 (including) |
Network_security_services | Mozilla | 3.12.1 (including) | 3.12.1 (including) |
Network_security_services | Mozilla | 3.12.2 (including) | 3.12.2 (including) |
Network_security_services | Mozilla | 3.12.3 (including) | 3.12.3 (including) |
Network_security_services | Mozilla | 3.12.3.1 (including) | 3.12.3.1 (including) |
Network_security_services | Mozilla | 3.12.3.2 (including) | 3.12.3.2 (including) |
Network_security_services | Mozilla | 3.12.4 (including) | 3.12.4 (including) |
Network_security_services | Mozilla | 3.12.5 (including) | 3.12.5 (including) |
Network_security_services | Mozilla | 3.12.6 (including) | 3.12.6 (including) |
Network_security_services | Mozilla | 3.12.7 (including) | 3.12.7 (including) |
Network_security_services | Mozilla | 3.12.8 (including) | 3.12.8 (including) |
Network_security_services | Mozilla | 3.12.9 (including) | 3.12.9 (including) |
Network_security_services | Mozilla | 3.12.10 (including) | 3.12.10 (including) |
Network_security_services | Mozilla | 3.12.11 (including) | 3.12.11 (including) |
Network_security_services | Mozilla | 3.14 (including) | 3.14 (including) |
Network_security_services | Mozilla | 3.14.1 (including) | 3.14.1 (including) |
Network_security_services | Mozilla | 3.14.2 (including) | 3.14.2 (including) |
Network_security_services | Mozilla | 3.14.3 (including) | 3.14.3 (including) |
Network_security_services | Mozilla | 3.14.4 (including) | 3.14.4 (including) |
Network_security_services | Mozilla | 3.14.5 (including) | 3.14.5 (including) |
Network_security_services | Mozilla | 3.15 (including) | 3.15 (including) |
Network_security_services | Mozilla | 3.15.1 (including) | 3.15.1 (including) |
Network_security_services | Mozilla | 3.15.2 (including) | 3.15.2 (including) |
Network_security_services | Mozilla | 3.15.3 (including) | 3.15.3 (including) |
Network_security_services | Mozilla | 3.15.3.1 (including) | 3.15.3.1 (including) |
Network_security_services | Mozilla | 3.15.4 (including) | 3.15.4 (including) |
Network_security_services | Mozilla | 3.15.5 (including) | 3.15.5 (including) |
Network_security_services | Mozilla | 3.16 (including) | 3.16 (including) |
Thunderbird | Mozilla | * | 24.6 (including) |
Thunderbird | Mozilla | 24.0 (including) | 24.0 (including) |
Thunderbird | Mozilla | 24.0.1 (including) | 24.0.1 (including) |
Thunderbird | Mozilla | 24.1 (including) | 24.1 (including) |
Thunderbird | Mozilla | 24.1.1 (including) | 24.1.1 (including) |
Thunderbird | Mozilla | 24.2 (including) | 24.2 (including) |
Thunderbird | Mozilla | 24.3 (including) | 24.3 (including) |
Thunderbird | Mozilla | 24.4 (including) | 24.4 (including) |
Thunderbird | Mozilla | 24.5 (including) | 24.5 (including) |