Vulnerabilidades do Mozilla Network Security Services
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Mozilla Network Security Services: 1 registro(s), com versões afetadas e correções.cpe:2.3:a:mozilla:network_security_services
CVE-2015-7575
Média · 5.9
CWE-19 09/01/2016
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2...
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.