VDB
GCVE-110-CERTCC-2014-772676
GCVE-110-CERTCC-2014-772676
Advisory PublishedCVSS 8.8/10
The Mozilla Network Security Services (NSS) library fails to properly verify RSA signatures due to incorrect ASN.1 parsing of DigestInfo. This vulnerability may allow an attacker to forge a RSA signature, such as a SSL certificate.
Risk Scores
CVSS 2.0
8.8/10
High · AV:N/AC:M/Au:N/C:C/I:C/A:N
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population3d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score6.9remediation_levelOFreport_confidenceCenvironmental_score8.65354515008target_distributionHenvironmental_vectorCDP:H/TD:H/CR:H/IR:H/AR:ND
References
Browse GCVE Records
73,866 records in the GCVE database · Updated July 19, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.