https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:57:46 +0000 https://cve.radiocsirt.org/vuln/certa-2012-avi-307 certa-2012-avi-307 https://cve.radiocsirt.org/vuln/certa-2012-avi-307 https://cve.radiocsirt.org/vuln/euvd-2026-109677 EUVD-2026-109677 https://cve.radiocsirt.org/vuln/euvd-2026-109677 https://cve.radiocsirt.org/vuln/fkie_cve-2012-0441 <p>The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13.4, as used in Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10, allows remote attackers to cause a denial of service (application crash) via a zero-length item, as demonstrated by (1) a zero-length basic constraint or (2) a zero-length field in an OCSP response.</p> <p>The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13.4, as used in Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10, allows remote attackers to cause a denial of service (application crash) via a zero-length item, as demonstrated by (1) a zero-length basic constraint or (2) a zero-length field in an OCSP response.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-0441 https://cve.radiocsirt.org/vuln/ghsa-89qc-hqm7-mh22 <p>The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13.4, as used in Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10, allows remote attackers to cause a denial of service (application crash) via a zero-length item, as demonstrated by (1) a zero-length basic constraint or (2) a zero-length field in an OCSP response.</p> <p>The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13.4, as used in Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10, allows remote attackers to cause a denial of service (application crash) via a zero-length item, as demonstrated by (1) a zero-length basic constraint or (2) a zero-length field in an OCSP response.</p> https://cve.radiocsirt.org/vuln/ghsa-89qc-hqm7-mh22 https://cve.radiocsirt.org/vuln/gsd-2012-0441 gsd-2012-0441 https://cve.radiocsirt.org/vuln/gsd-2012-0441 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 https://cve.radiocsirt.org/vuln/rhsa-2012:1090 <p>nss: NSS parsing errors with zero length items</p> <p>nss: NSS parsing errors with zero length items</p> https://cve.radiocsirt.org/vuln/rhsa-2012:1090