MGASA-2014-0137

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2014-0137.html

Import Source

https://advisories.mageia.org/MGASA-2014-0137.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2014-0137

Related

CVE-2014-1492
CVE-2014-1493
CVE-2014-1497
CVE-2014-1505
CVE-2014-1508
CVE-2014-1509
CVE-2014-1510
CVE-2014-1511
CVE-2014-1512
CVE-2014-1513
CVE-2014-1514

Published

2014-03-20T18:33:01Z

Modified

2022-01-25T20:46:01Z

Summary

Updated nss, firefox and thunderbird packages fix security vulnerabilities

Details

In the NSS library before version 3.16, in a wildcard certificate, the wildcard character was embedded within the U-label of an internationalized domain name, which is not in accordance with RFC 6125 (CVE-2014-1492).

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running it (CVE-2014-1493, CVE-2014-1510, CVE-2014-1511, CVE-2014-1512, CVE-2014-1513, CVE-2014-1514).

Several information disclosure flaws were found in the way Firefox and Thunderbird processed malformed web content. An attacker could use these flaws to gain access to sensitive information such as cross-domain content or protected memory addresses or, potentially, cause Firefox or Thunderbird to crash (CVE-2014-1497, CVE-2014-1508, CVE-2014-1505).

A memory corruption flaw was found in the way Firefox and Thunderbird rendered certain PDF files. An attacker able to trick a user into installing a malicious extension could use this flaw to crash Firefox or, potentially, execute arbitrary code with the privileges of the user running Firefox or Thunderbird (CVE-2014-1509).

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:3 / rootcerts

Package

Name: rootcerts
Purl: pkg:rpm/mageia/rootcerts?distro=mageia-3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20140318.00-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / nspr

Package

Name: nspr
Purl: pkg:rpm/mageia/nspr?distro=mageia-3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.4-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / nss

Package

Name: nss
Purl: pkg:rpm/mageia/nss?distro=mageia-3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.16.0-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / firefox

Package

Name: firefox
Purl: pkg:rpm/mageia/firefox?distro=mageia-3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

24.4.0-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / firefox-l10n

Package

Name: firefox-l10n
Purl: pkg:rpm/mageia/firefox-l10n?distro=mageia-3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

24.4.0-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / thunderbird

Package

Name: thunderbird
Purl: pkg:rpm/mageia/thunderbird?distro=mageia-3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

24.4.0-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / thunderbird-l10n

Package

Name: thunderbird-l10n
Purl: pkg:rpm/mageia/thunderbird-l10n?distro=mageia-3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

24.4.0-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:4 / rootcerts

Package

Name: rootcerts
Purl: pkg:rpm/mageia/rootcerts?distro=mageia-4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20140318.00-1.mga4

Ecosystem specific

{
    "section": "core"
}

Mageia:4 / nspr

Package

Name: nspr
Purl: pkg:rpm/mageia/nspr?distro=mageia-4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.10.4-1.mga4

Ecosystem specific

{
    "section": "core"
}

Mageia:4 / nss

Package

Name: nss
Purl: pkg:rpm/mageia/nss?distro=mageia-4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.16.0-1.mga4

Ecosystem specific

{
    "section": "core"
}

Mageia:4 / firefox

Package

Name: firefox
Purl: pkg:rpm/mageia/firefox?distro=mageia-4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

24.4.0-1.mga4

Ecosystem specific

{
    "section": "core"
}

Mageia:4 / firefox-l10n

Package

Name: firefox-l10n
Purl: pkg:rpm/mageia/firefox-l10n?distro=mageia-4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

24.4.0-1.mga4

Ecosystem specific

{
    "section": "core"
}

Mageia:4 / thunderbird

Package

Name: thunderbird
Purl: pkg:rpm/mageia/thunderbird?distro=mageia-4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

24.4.0-1.mga4

Ecosystem specific

{
    "section": "core"
}

Mageia:4 / thunderbird-l10n

Package

Name: thunderbird-l10n
Purl: pkg:rpm/mageia/thunderbird-l10n?distro=mageia-4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

24.4.0-1.mga4

Ecosystem specific

{
    "section": "core"
}