CVE-2024-11706

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 133 Thunderbird versions prior to 133

Description: A null pointer dereference may have occurred in the pk12util tool, specifically in the SEC ASN1DecodeItem Util function, when handling malformed or improperly formatted input files. This issue can potentially allow a remote attacker to cause a denial of service.

Recommendations: For Firefox versions prior to 133, update to a version that includes the fix for this issue. For Thunderbird versions prior to 133, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting the use of the pk12util tool and the SEC ASN1DecodeItem Util function until a patch is available.