Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-2014-1558. <a href"http://cwe.mitre.org/data/definitions/176.html" target"_blank">CWE-176: CWE-176: Improper Handling of Unicode Encoding</a>
Publication date: Wed, 23 Jul 2014 16:12:00 +0000