This host is installed with Firefox or Thunderbird or SeaMonkey or Evolution or Pidgin or AOL Instant Messenger Product(s) which is prone to Buffer Overflow vulnerability.

Successful exploitation will let the attacker execute arbitrary code in the context of the affected application and may lead to denial of service.

Upgrade to NSS library 3.12.3 or later. http://www.mozilla.org/projects/security/pki/nss/tools/

A flaw exists in the regular expression parser used in the NSS library to match common names in certificates and may result in a heap based buffer overflow. It can be exploited via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.

Firefox/Thunderbird/SeaMonkey/Evolution/Pidgin/AOL Instant Messenger containing NSS library before 3.12.3.

• http://secunia.com/advisories/36102
• https://bugzilla.redhat.com/show_bug.cgi?id=512912

---

Updated on 2017-03-28