CVE-2014-1498 - CVE House
Back to Database
Status published Medium CVE-2014-1498

The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey...

Vulnerability Description

The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to cause a denial of service (application crash) via vectors that trigger generation of a key that supports the Elliptic Curve ec-dual-use algorithm.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-1498

Credits & Attribution

No credits recorded in the NVD database.

References

More from suse

View All →
CVE-2020-10676
In Rancher 2.x before 2.6.13 and 2.7.x before 2.7.4, an...
High 8.8
CVE-2019-6287
In Rancher 2.0.0 through 2.1.5, project members have continued access...
High 8.1
CVE-2019-13209
Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket...
Medium 6.1
CVE-2019-12303
In Rancher 2 through 2.2.3, Project owners can inject additional...
High 8.8
CVE-2019-12274
In Rancher 1 and 2 through 2.2.3, unprivileged users (if...
High 8.8

Affected Vendor

Affected Software

linux enterprise desktop, linux enterprise server, linux enterprise software development kit, solaris, opensuse, seamonkey, firefox
Vulnerable Versions:
11, 11.3, 13.1, 11.4, 12.3, 0

Timeline

Official Publish: March 19th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.