CVE Catalog
CVE-2014-3677
HighSummary
Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption.
Risk Assessment
The organization may be exposed to remote code execution, potentially leading to data loss or system takeover.
Recommendation
It is recommended to update Shim software to the latest version and monitor systems for unauthorized changes to the MOK list.
Other vulnerabilities in Shim
Original NVD description (English source)
Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption.