description: After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.
problem types: Crash when handling empty pkcs7 sequence
affected:
{
vendor: Mozilla
product: Firefox ESR
versions:
version: unspecified, lessThan: 91.5, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Firefox
versions:
version: unspecified, lessThan: 96, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Thunderbird
versions:
version: unspecified, lessThan: 91.5, status: affected, versionType: custom
}
