Published: 11/06/2014 Updated: 28/12/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Mozilla Netscape Portable Runtime (NSPR) prior to 4.10.6 allows remote malicious users to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla netscape portable runtime 4.10
mozilla netscape portable runtime 4.9.6
mozilla netscape portable runtime 4.9.5
mozilla netscape portable runtime 4.9.2
mozilla netscape portable runtime 4.9.1
mozilla netscape portable runtime 4.8.4
mozilla netscape portable runtime 4.8.3
mozilla netscape portable runtime 4.7.2
mozilla netscape portable runtime 4.7.1
mozilla netscape portable runtime 4.6.2
mozilla netscape portable runtime 4.6.1
mozilla netscape portable runtime 4.1.2
mozilla netscape portable runtime 4.1.1
mozilla netscape portable runtime 4.8.8
mozilla netscape portable runtime 4.8.7
mozilla netscape portable runtime 4.7.6
mozilla netscape portable runtime 4.7.5
mozilla netscape portable runtime 4.6.7
mozilla netscape portable runtime 4.6.6
mozilla netscape portable runtime 4.6.5
mozilla netscape portable runtime 4.4.1
mozilla netscape portable runtime 4.3
mozilla netscape portable runtime 4.10.3
mozilla netscape portable runtime 4.10.2
mozilla netscape portable runtime 4.10.1
mozilla netscape portable runtime 4.9
mozilla netscape portable runtime 4.8.9
mozilla netscape portable runtime 4.8.2
mozilla netscape portable runtime 4.8
mozilla netscape portable runtime 4.7
mozilla netscape portable runtime 4.6.8
mozilla netscape portable runtime 4.6
mozilla netscape portable runtime 4.5.1
mozilla netscape portable runtime
mozilla netscape portable runtime 4.10.4
mozilla netscape portable runtime 4.9.4
mozilla netscape portable runtime 4.9.3
mozilla netscape portable runtime 4.8.6
mozilla netscape portable runtime 4.8.5
mozilla netscape portable runtime 4.7.4
mozilla netscape portable runtime 4.7.3
mozilla netscape portable runtime 4.6.4
mozilla netscape portable runtime 4.6.3
mozilla netscape portable runtime 4.2
mozilla netscape portable runtime 4.2.2

NSPR could be made to crash or run programs if it received specially crafted input ...

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: multiple memory safety errors and buffer overflows may lead to the execution of arbitrary code or denial of service For the stable distribution (wheezy), these problems have been fixed in version 2460-1 For the unstable distrib ...

Mozilla Netscape Portable Runtime (NSPR) before 4106 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions ...

Mozilla Foundation Security Advisory 2014-55 Out of bounds write in NSPR Announced June 10, 2014 Reporter Abhishek Arya Impact Critical Products Netscape Portable Runtime Fixed in ...

An out-of-bounds write flaw was found in NSPR A remote attacker could potentially use this flaw to crash an application using NSPR or, possibly, execute arbitrary code with the privileges of the user running that application This NSPR flaw was not exposed to web content in any shipped version of Firefox ...

NVD-CWE-Other https://bugzilla.mozilla.org/show_bug.cgi?id=1018783 https://bugzilla.redhat.com/show_bug.cgi?id=1107432 http://www.mozilla.org/security/announce/2014/mfsa2014-55.html http://secunia.com/advisories/58984 http://www.securityfocus.com/bid/67975 http://secunia.com/advisories/59229 http://secunia.com/advisories/59275 http://secunia.com/advisories/59318 http://www.ubuntu.com/usn/USN-2265-1 http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html http://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html http://secunia.com/advisories/59614 http://secunia.com/advisories/59377 http://secunia.com/advisories/59387 http://www.securitytracker.com/id/1030404 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html https://security.gentoo.org/glsa/201504-01 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 http://secunia.com/advisories/59486 http://secunia.com/advisories/59425 http://www.debian.org/security/2014/dsa-2962 http://www.debian.org/security/2014/dsa-2960 http://www.debian.org/security/2014/dsa-2955 http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html https://usn.ubuntu.com/2265-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2014-1545

CVE-2014-1545

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect