Boletines de Vulnerabilidades

DSA-2858 iceweasel - several vulnerabilities


Información sobre el sistema

   
Software afectado Debian

Descripción

Multiple security issues have been found in Iceweasel, Debians versionof the Mozilla Firefox web browser: Multiple memory safety errors,use-after-frees, too-verbose error messages and missing permission checksmay lead to the execution of arbitrary code, the bypass of securitychecks or information disclosure. This update also addresses securityissues in the bundled version of the NSS crypto library.

More info:

http://www.debian.org/security/2014/dsa-2858

Identificadores estándar

Propiedad Valor
CVE CVE-2014-1477 ,CVE-2014-1479 ,CVE-2014-1481 ,CVE-2014-1482 ,CVE-2014-1486 ,CVE-2014-1487 ,CVE-2014-1490 ,CVE-2014-1491 and DSA-2858.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-02-13

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT