4.3
CVSSv2

CVE-2014-1559

Published: 23/07/2014 Updated: 07/01/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 allow remote malicious users to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-2014-1558.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla thunderbird 24.6

mozilla thunderbird 24.5

mozilla thunderbird 24.0

mozilla firefox

mozilla thunderbird 24.0.1

mozilla thunderbird 24.1

mozilla thunderbird 24.1.1

mozilla thunderbird 24.2

mozilla thunderbird

mozilla thunderbird 24.3

mozilla thunderbird 24.4

Vendor Advisories

Firefox could be made to crash or run programs as your login if it opened a malicious website ...
Several security issues were fixed in Thunderbird ...
Mozilla Foundation Security Advisory 2014-65 Certificate parsing broken by non-standard character encoding Announced July 22, 2014 Reporter Christian Holler Impact Moderate Products Firefox, Thunderbird Fixed in ...