Wan-Teh Chang

The issue is related to an integer overflow in the `PL ArenaAllocate` function, which can be triggered by a crafted X.509 certificate. This can cause a denial of service, resulting in an application crash, and may have other unspecified impacts.

The issue is related to an untrusted search path vulnerability in Mozilla Network Security Services (NSS) as used in Google Chrome. This might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. The vendor has responded that they do not consider this behavior a security bug.

The issue concerns the Certificate Trust Policy component, which fails to perform CRL checking for Extended Validation (EV) certificates lacking OCSP URLs. This might allow man-in-the-middle attackers to spoof an SSL server via a revoked certificate.

The issue allows man-in-the-middle attackers to redirect a connection and obtain sensitive information via crafted responses, due to CFNetwork supporting anonymous SSL and TLS connections.

A spoofing issue exists due to incomplete validation of the distinguished name in a digital certificate. This can be combined with other attacks, such as DNS spoofing, allowing an attacker to spoof a digital certificate of a website for applications using Windows HTTP Services.