CVE:CVE-2014-1498
CNNVD:CNNVD-201403-355
Mozilla Firefox和SeaMonkey都是由美国Mozilla基金会开发。Firefox是一款开源Web浏览器。SeaMonkey是一套免费、开源以及跨平台的网络套装软件。
Mozilla Firefox 27.0.1及之前的版本和SeaMonkey 2.25.beta2及之前的版本中的‘crypto.generateCRMFRequest’方法存在输入验证漏洞，该漏洞源于程序没有正确验证密钥类型。远程攻击者可利用该漏洞造成拒绝服务（应用程序崩溃）。
solution:Upgrade suse linux_enterprise_desktop to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_server to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_software_development_kit to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade oracle solaris to a higher version than 11.3,and avoid the version 11.3; Upgrade opensuse opensuse to a higher version than 13.1,and avoid the version 13.1; Upgrade opensuse_project opensuse to a higher version than 11.4,12.3,and avoid the version 11.4,12.3; Upgrade mozilla seamonkey to a higher version than 2.25,and avoid the version (,2.25); Upgrade mozilla firefox to a higher version than 28.0,and avoid the version (,28.0)