漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bugs in the library’s Elliptic Curve Cryptography (ECC) implementation.An attacker could potentially abuse these bugs to learn information about a server’s private ECC key (a key leakage attack) or craft an invalid ECDSA signature that nevertheless passes as valid.The security update addresses the vulnerability by fixing the bugs disclosed in the ECC implementation, aka 'MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability'.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Research JavaScript Cryptography Library 安全漏洞
Vulnerability Description
Microsoft Research JavaScript Cryptography Library是美国微软（Microsoft）公司的一款JavaScript加密库。 Microsoft Research JavaScript Cryptography Library V1.4版本中Elliptic Curve Cryptography的实现存在安全漏洞。攻击者可利用该漏洞获取敏感信息或创建无效的ECDSA签名（会被认定为有效）。
CVSS Information
N/A
Vulnerability Type
N/A