Network Security Services
A heap-based buffer overflow issue exists in the regular-expression parser of Mozilla Network Security Services (NSS), which can be triggered by a long domain name in the subject's Common Name (CN) field of an X.509 certificate. This issue may allow remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code. The issue is related to the `cert TestHostName` function.