Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a "signature malleability" issue.
2014-09-25T17:55:04.387
2025-04-12T10:46:40.837
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | chrome | ≤ 37.0.2062.120 | Yes | |
| Operating System | apple | mac_os_x | * | No |
| Operating System | microsoft | windows | * | No |
| Application | mozilla | firefox | ≤ 32.0 | Yes |
| Application | mozilla | firefox | 31.0 | Yes |
| Application | mozilla | firefox | 31.1.0 | Yes |
| Application | mozilla | firefox | 32.0.1 | Yes |
| Application | mozilla | firefox | 32.0.2 | Yes |
| Application | mozilla | firefox_esr | 24.8.0 | Yes |
| Application | mozilla | network_security_services | ≤ 3.16.2.0 | Yes |
| Application | mozilla | network_security_services | 3.2 | Yes |
| Application | mozilla | network_security_services | 3.2.1 | Yes |
| Application | mozilla | network_security_services | 3.3 | Yes |
| Application | mozilla | network_security_services | 3.3.1 | Yes |
| Application | mozilla | network_security_services | 3.3.2 | Yes |
| Application | mozilla | network_security_services | 3.4 | Yes |
| Application | mozilla | network_security_services | 3.4.1 | Yes |
| Application | mozilla | network_security_services | 3.4.2 | Yes |
| Application | mozilla | network_security_services | 3.5 | Yes |
| Application | mozilla | network_security_services | 3.6 | Yes |
| Application | mozilla | network_security_services | 3.6.1 | Yes |
| Application | mozilla | network_security_services | 3.7 | Yes |
| Application | mozilla | network_security_services | 3.7.1 | Yes |
| Application | mozilla | network_security_services | 3.7.2 | Yes |
| Application | mozilla | network_security_services | 3.7.3 | Yes |
| Application | mozilla | network_security_services | 3.7.5 | Yes |
| Application | mozilla | network_security_services | 3.7.7 | Yes |
| Application | mozilla | network_security_services | 3.8 | Yes |
| Application | mozilla | network_security_services | 3.9 | Yes |
| Application | mozilla | network_security_services | 3.11.2 | Yes |
| Application | mozilla | network_security_services | 3.11.3 | Yes |
| Application | mozilla | network_security_services | 3.11.4 | Yes |
| Application | mozilla | network_security_services | 3.11.5 | Yes |
| Application | mozilla | network_security_services | 3.12 | Yes |
| Application | mozilla | network_security_services | 3.12.1 | Yes |
| Application | mozilla | network_security_services | 3.12.2 | Yes |
| Application | mozilla | network_security_services | 3.12.3 | Yes |
| Application | mozilla | network_security_services | 3.12.3.1 | Yes |
| Application | mozilla | network_security_services | 3.12.3.2 | Yes |
| Application | mozilla | network_security_services | 3.12.4 | Yes |
| Application | mozilla | network_security_services | 3.12.5 | Yes |
| Application | mozilla | network_security_services | 3.12.6 | Yes |
| Application | mozilla | network_security_services | 3.12.7 | Yes |
| Application | mozilla | network_security_services | 3.12.8 | Yes |
| Application | mozilla | network_security_services | 3.12.9 | Yes |
| Application | mozilla | network_security_services | 3.12.10 | Yes |
| Application | mozilla | network_security_services | 3.12.11 | Yes |
| Application | mozilla | network_security_services | 3.14 | Yes |
| Application | mozilla | network_security_services | 3.14.1 | Yes |
| Application | mozilla | network_security_services | 3.14.2 | Yes |
| Application | mozilla | network_security_services | 3.14.3 | Yes |
| Application | mozilla | network_security_services | 3.14.4 | Yes |
| Application | mozilla | network_security_services | 3.14.5 | Yes |
| Application | mozilla | network_security_services | 3.15 | Yes |
| Application | mozilla | network_security_services | 3.15.1 | Yes |
| Application | mozilla | network_security_services | 3.15.2 | Yes |
| Application | mozilla | network_security_services | 3.15.3 | Yes |
| Application | mozilla | network_security_services | 3.15.3.1 | Yes |
| Application | mozilla | network_security_services | 3.15.4 | Yes |
| Application | mozilla | network_security_services | 3.15.5 | Yes |
| Application | mozilla | network_security_services | 3.16 | Yes |
| Application | mozilla | network_security_services | 3.16.1 | Yes |
| Application | mozilla | network_security_services | 3.16.3 | Yes |
| Application | mozilla | network_security_services | 3.16.4 | Yes |
| Application | mozilla | seamonkey | * | Yes |
| Application | mozilla | seamonkey | ≤ 2.29 | Yes |
| Application | mozilla | seamonkey | 1.0 | Yes |
| Application | mozilla | seamonkey | 1.0 | Yes |
| Application | mozilla | seamonkey | 1.0 | Yes |
| Application | mozilla | seamonkey | 1.0.1 | Yes |
| Application | mozilla | seamonkey | 1.0.2 | Yes |
| Application | mozilla | seamonkey | 1.0.3 | Yes |
| Application | mozilla | seamonkey | 1.0.4 | Yes |
| Application | mozilla | seamonkey | 1.0.5 | Yes |
| Application | mozilla | seamonkey | 1.0.6 | Yes |
| Application | mozilla | seamonkey | 1.0.7 | Yes |
| Application | mozilla | seamonkey | 1.0.8 | Yes |
| Application | mozilla | seamonkey | 1.0.9 | Yes |
| Application | mozilla | seamonkey | 1.1 | Yes |
| Application | mozilla | seamonkey | 1.1 | Yes |
| Application | mozilla | seamonkey | 1.1 | Yes |
| Application | mozilla | seamonkey | 1.1.1 | Yes |
| Application | mozilla | seamonkey | 1.1.2 | Yes |
| Application | mozilla | seamonkey | 1.1.3 | Yes |
| Application | mozilla | seamonkey | 1.1.4 | Yes |
| Application | mozilla | seamonkey | 1.1.5 | Yes |
| Application | mozilla | seamonkey | 1.1.6 | Yes |
| Application | mozilla | seamonkey | 1.1.7 | Yes |
| Application | mozilla | seamonkey | 1.1.8 | Yes |
| Application | mozilla | seamonkey | 1.1.9 | Yes |
| Application | mozilla | seamonkey | 1.1.10 | Yes |
| Application | mozilla | seamonkey | 1.1.11 | Yes |
| Application | mozilla | seamonkey | 1.1.12 | Yes |
| Application | mozilla | seamonkey | 1.1.13 | Yes |
| Application | mozilla | seamonkey | 1.1.14 | Yes |
| Application | mozilla | seamonkey | 1.1.15 | Yes |
| Application | mozilla | seamonkey | 1.1.16 | Yes |
| Application | mozilla | seamonkey | 1.1.17 | Yes |
| Application | mozilla | seamonkey | 1.1.18 | Yes |
| Application | mozilla | seamonkey | 1.1.19 | Yes |
| Application | mozilla | seamonkey | 1.5.0.8 | Yes |
| Application | mozilla | seamonkey | 1.5.0.9 | Yes |
| Application | mozilla | seamonkey | 1.5.0.10 | Yes |
| Application | mozilla | seamonkey | 2.0 | Yes |
| Application | mozilla | seamonkey | 2.0 | Yes |
| Application | mozilla | seamonkey | 2.0 | Yes |
| Application | mozilla | seamonkey | 2.0 | Yes |
| Application | mozilla | seamonkey | 2.0 | Yes |
| Application | mozilla | seamonkey | 2.0 | Yes |
| Application | mozilla | seamonkey | 2.0 | Yes |
| Application | mozilla | seamonkey | 2.0 | Yes |
| Application | mozilla | seamonkey | 2.0.1 | Yes |
| Application | mozilla | seamonkey | 2.0.2 | Yes |
| Application | mozilla | seamonkey | 2.0.3 | Yes |
| Application | mozilla | seamonkey | 2.0.4 | Yes |
| Application | mozilla | seamonkey | 2.0.5 | Yes |
| Application | mozilla | seamonkey | 2.0.6 | Yes |
| Application | mozilla | seamonkey | 2.0.7 | Yes |
| Application | mozilla | seamonkey | 2.0.8 | Yes |
| Application | mozilla | seamonkey | 2.0.9 | Yes |
| Application | mozilla | seamonkey | 2.0.10 | Yes |
| Application | mozilla | seamonkey | 2.0.11 | Yes |
| Application | mozilla | seamonkey | 2.0.12 | Yes |
| Application | mozilla | seamonkey | 2.0.13 | Yes |
| Application | mozilla | seamonkey | 2.0.14 | Yes |
| Application | mozilla | seamonkey | 2.1 | Yes |
| Application | mozilla | seamonkey | 2.1 | Yes |
| Application | mozilla | seamonkey | 2.1 | Yes |
| Application | mozilla | seamonkey | 2.1 | Yes |
| Application | mozilla | seamonkey | 2.1 | Yes |
| Application | mozilla | seamonkey | 2.1 | Yes |
| Application | mozilla | seamonkey | 2.1 | Yes |
| Application | mozilla | seamonkey | 2.1 | Yes |
| Application | mozilla | seamonkey | 2.1 | Yes |
| Application | mozilla | seamonkey | 2.2 | Yes |
| Application | mozilla | seamonkey | 2.2 | Yes |
| Application | mozilla | seamonkey | 2.2 | Yes |
| Application | mozilla | seamonkey | 2.2 | Yes |
| Application | mozilla | seamonkey | 2.10 | Yes |
| Application | mozilla | seamonkey | 2.10 | Yes |
| Application | mozilla | seamonkey | 2.10 | Yes |
| Application | mozilla | seamonkey | 2.10 | Yes |
| Application | mozilla | seamonkey | 2.10.1 | Yes |
| Application | mozilla | seamonkey | 2.11 | Yes |
| Application | mozilla | seamonkey | 2.11 | Yes |
| Application | mozilla | seamonkey | 2.11 | Yes |
| Application | mozilla | seamonkey | 2.11 | Yes |
| Application | mozilla | seamonkey | 2.11 | Yes |
| Application | mozilla | seamonkey | 2.11 | Yes |
| Application | mozilla | seamonkey | 2.11 | Yes |
| Application | mozilla | seamonkey | 2.12 | Yes |
| Application | mozilla | seamonkey | 2.12 | Yes |
| Application | mozilla | seamonkey | 2.12 | Yes |
| Application | mozilla | seamonkey | 2.12 | Yes |
| Application | mozilla | seamonkey | 2.12 | Yes |
| Application | mozilla | seamonkey | 2.12 | Yes |
| Application | mozilla | seamonkey | 2.12 | Yes |
| Application | mozilla | seamonkey | 2.12.1 | Yes |
| Application | mozilla | seamonkey | 2.13 | Yes |
| Application | mozilla | seamonkey | 2.13 | Yes |
| Application | mozilla | seamonkey | 2.13 | Yes |
| Application | mozilla | seamonkey | 2.13 | Yes |
| Application | mozilla | seamonkey | 2.13 | Yes |
| Application | mozilla | seamonkey | 2.13 | Yes |
| Application | mozilla | seamonkey | 2.13 | Yes |
| Application | mozilla | seamonkey | 2.13.1 | Yes |
| Application | mozilla | seamonkey | 2.13.2 | Yes |
| Application | mozilla | seamonkey | 2.14 | Yes |
| Application | mozilla | seamonkey | 2.14 | Yes |
| Application | mozilla | seamonkey | 2.14 | Yes |
| Application | mozilla | seamonkey | 2.14 | Yes |
| Application | mozilla | seamonkey | 2.14 | Yes |
| Application | mozilla | seamonkey | 2.14 | Yes |
| Application | mozilla | seamonkey | 2.15 | Yes |
| Application | mozilla | seamonkey | 2.15 | Yes |
| Application | mozilla | seamonkey | 2.15 | Yes |
| Application | mozilla | seamonkey | 2.15 | Yes |
| Application | mozilla | seamonkey | 2.15 | Yes |
| Application | mozilla | seamonkey | 2.15 | Yes |
| Application | mozilla | seamonkey | 2.15 | Yes |
| Application | mozilla | seamonkey | 2.15.1 | Yes |
| Application | mozilla | seamonkey | 2.15.2 | Yes |
| Application | mozilla | seamonkey | 2.16 | Yes |
| Application | mozilla | seamonkey | 2.16 | Yes |
| Application | mozilla | seamonkey | 2.16 | Yes |
| Application | mozilla | seamonkey | 2.16 | Yes |
| Application | mozilla | seamonkey | 2.16 | Yes |
| Application | mozilla | seamonkey | 2.16 | Yes |
| Application | mozilla | seamonkey | 2.16.1 | Yes |
| Application | mozilla | seamonkey | 2.16.2 | Yes |
| Application | mozilla | seamonkey | 2.17 | Yes |
| Application | mozilla | seamonkey | 2.17 | Yes |
| Application | mozilla | seamonkey | 2.17 | Yes |
| Application | mozilla | seamonkey | 2.17 | Yes |
| Application | mozilla | seamonkey | 2.17 | Yes |
| Application | mozilla | seamonkey | 2.17.1 | Yes |
| Application | mozilla | seamonkey | 2.18 | Yes |
| Application | mozilla | seamonkey | 2.18 | Yes |
| Application | mozilla | seamonkey | 2.18 | Yes |
| Application | mozilla | seamonkey | 2.18 | Yes |
| Application | mozilla | seamonkey | 2.19 | Yes |
| Application | mozilla | seamonkey | 2.19 | Yes |
| Application | mozilla | seamonkey | 2.19 | Yes |
| Application | mozilla | seamonkey | 2.20 | Yes |
| Application | mozilla | seamonkey | 2.20 | Yes |
| Application | mozilla | seamonkey | 2.20 | Yes |
| Application | mozilla | seamonkey | 2.20 | Yes |
| Application | mozilla | seamonkey | 2.21 | Yes |
| Application | mozilla | seamonkey | 2.21 | Yes |
| Application | mozilla | seamonkey | 2.22 | Yes |
| Application | mozilla | seamonkey | 2.22 | Yes |
| Application | mozilla | seamonkey | 2.22.1 | Yes |
| Application | mozilla | seamonkey | 2.23 | Yes |
| Application | mozilla | seamonkey | 2.23 | Yes |
| Application | mozilla | seamonkey | 2.24 | Yes |
| Application | mozilla | seamonkey | 2.24 | Yes |
| Application | mozilla | seamonkey | 2.25 | Yes |
| Application | mozilla | seamonkey | 2.25 | Yes |
| Application | mozilla | seamonkey | 2.25 | Yes |
| Application | mozilla | seamonkey | 2.25 | Yes |
| Application | mozilla | seamonkey | 2.26 | Yes |
| Application | mozilla | seamonkey | 2.26 | Yes |
| Application | mozilla | thunderbird | ≤ 24.8.0 | Yes |
| Application | mozilla | thunderbird | 31.0 | Yes |
| Application | mozilla | thunderbird | 31.1.0 | Yes |
| Application | mozilla | thunderbird | 31.1.1 | Yes |
| Application | chrome | ≤ 37.0.2062.103 | Yes | |
| Application | chrome | 37.0.2062.0 | Yes | |
| Application | chrome | 37.0.2062.3 | Yes | |
| Application | chrome | 37.0.2062.20 | Yes | |
| Application | chrome | 37.0.2062.100 | Yes | |
| Application | chrome | 37.0.2062.102 | Yes | |
| Operating System | chrome_os | * | No |