| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≤ 30.0 | |
| thunderbird | = 24.0= 24.0.1= 24.1= 24.1.1= 24.2= 24.3= 24.4= 24.5= 24.6≤ 24.7 |
Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-2014-1558.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free