Home > Vulnerability Database > CVE-2015-2730

Mend.io Vulnerability Database

CVE-2015-2730

Date: July 5, 2015

Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors.

Language: Unix

Severity Score

3.7

Related Resources (25)

Url: http://www.ubuntu.com/usn/USN-2656-1

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2015-2730

Url: http://rhn.redhat.com/errata/RHSA-2015-1699.html

Url: http://www.ubuntu.com/usn/USN-2656-2

Url: http://rhn.redhat.com/errata/RHSA-2015-1664.html

Url: http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2015-2730

Url: http://www.debian.org/security/2015/dsa-3336

Url: https://access.redhat.com/security/cve/CVE-2015-2730

Url: http://www.securityfocus.com/bid/75541

Url: http://www.mozilla.org/security/announce/2015/mfsa2015-64.html

Url: http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Url: https://security.gentoo.org/glsa/201512-10

Url: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html

Url: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html

Url: http://www.securityfocus.com/bid/83399

Url: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=1125025

Url: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html

Url: http://www.securitytracker.com/id/1032783

Url: https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes

Url: http://www.ubuntu.com/usn/USN-2672-1

Url: http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html

Url: http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Url: https://www.mend.io/vulnerability-database/CVE-2015-2730

Severity Score

3.7

Weakness Type (CWE)

Cryptographic Issues

CWE-310

CVSS v3.1

Base Score:	3.7
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2015-2730

Date: July 5, 2015

Language: Unix

Severity Score

Related Resources (25)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?