CVE-2014-1544
nss: Race-condition in certificate verification can lead to Remote code execution (MFSA 2014-63)
Loading…
Severity
CriticalRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · July 22, 2014
Updated · June 27, 2026
Description
A race condition was found in the way NSS verified certain certificates. A remote attacker could use this flaw to crash an application using NSS or, possibly, execute arbitrary code with the privileges of the user running that application.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-416 · Use After Free