Mozilla Foundation Security Advisory 2016-36
Use-after-free during processing of DER encoded keys in NSS
- Announced
- March 8, 2016
- Reporter
- Tim Taubert
- Impact
- High
- Products
- Firefox, Firefox ESR, NSS, Thunderbird
- Fixed in
-
- Firefox 45
- Firefox ESR 38.8
- NSS 3.19.2.4
- NSS 3.21.1
- Thunderbird 38.8
- Thunderbird 45
Description
Mozilla developer Tim Taubert used the Address Sanitizer tool and software fuzzing to discover a use-after-free vulnerability while processing DER encoded keys in the Network Security Services (NSS) libraries. The vulnerability overwrites the freed memory with zeroes. This issue has been addressed in NSS 3.21.1, shipping in Firefox 45.