CVE-2014-1545 Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and consol...
HighCVSS 10.0
EPSS 6.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/nspr(Debian:12) | < 2:4.10.6-1 | 2:4.10.6-1 |
| debian/nspr(Debian:13) | < 2:4.10.6-1 | 2:4.10.6-1 |
| debian/nspr(Debian:14) | < 2:4.10.6-1 | 2:4.10.6-1 |
| mozilla netscape portable runtime | <= 4.10.5 | No fix listed |
| mozilla netscape portable runtime | = 4.1.1 | No fix listed |
| mozilla netscape portable runtime | = 4.1.2 | No fix listed |
| mozilla netscape portable runtime | = 4.2 | No fix listed |
| mozilla netscape portable runtime | = 4.2.2 | No fix listed |
| mozilla netscape portable runtime | = 4.3 | No fix listed |
| mozilla netscape portable runtime | = 4.4.1 | No fix listed |
| mozilla netscape portable runtime | = 4.5.1 | No fix listed |
| mozilla netscape portable runtime | = 4.6 | No fix listed |
| mozilla netscape portable runtime | = 4.6.1 | No fix listed |
| mozilla netscape portable runtime | = 4.6.2 | No fix listed |
| mozilla netscape portable runtime | = 4.6.3 | No fix listed |
| mozilla netscape portable runtime | = 4.6.4 | No fix listed |
| mozilla netscape portable runtime | = 4.6.5 | No fix listed |
| mozilla netscape portable runtime | = 4.6.6 | No fix listed |
| mozilla netscape portable runtime | = 4.6.7 | No fix listed |
| mozilla netscape portable runtime | = 4.6.8 | No fix listed |
| mozilla netscape portable runtime | = 4.7 | No fix listed |
| mozilla netscape portable runtime | = 4.7.1 | No fix listed |
| mozilla netscape portable runtime | = 4.7.2 | No fix listed |
| mozilla netscape portable runtime | = 4.7.3 | No fix listed |
| mozilla netscape portable runtime | = 4.7.4 | No fix listed |
Show 23 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla netscape portable runtime | = 4.7.5 | No fix listed |
| mozilla netscape portable runtime | = 4.7.6 | No fix listed |
| mozilla netscape portable runtime | = 4.8 | No fix listed |
| mozilla netscape portable runtime | = 4.8.2 | No fix listed |
| mozilla netscape portable runtime | = 4.8.3 | No fix listed |
| mozilla netscape portable runtime | = 4.8.4 | No fix listed |
| mozilla netscape portable runtime | = 4.8.5 | No fix listed |
| mozilla netscape portable runtime | = 4.8.6 | No fix listed |
| mozilla netscape portable runtime | = 4.8.7 | No fix listed |
| mozilla netscape portable runtime | = 4.8.8 | No fix listed |
| mozilla netscape portable runtime | = 4.8.9 | No fix listed |
| mozilla netscape portable runtime | = 4.9 | No fix listed |
| mozilla netscape portable runtime | = 4.9.1 | No fix listed |
| mozilla netscape portable runtime | = 4.9.2 | No fix listed |
| mozilla netscape portable runtime | = 4.9.3 | No fix listed |
| mozilla netscape portable runtime | = 4.9.4 | No fix listed |
| mozilla netscape portable runtime | = 4.9.5 | No fix listed |
| mozilla netscape portable runtime | = 4.9.6 | No fix listed |
| mozilla netscape portable runtime | = 4.10 | No fix listed |
| mozilla netscape portable runtime | = 4.10.1 | No fix listed |
| mozilla netscape portable runtime | = 4.10.2 | No fix listed |
| mozilla netscape portable runtime | = 4.10.3 | No fix listed |
| mozilla netscape portable runtime | = 4.10.4 | No fix listed |
References
- Debian Security Tracker CVE-2014-1545 vendor-advisory
- kb.juniper.net
- openSUSE-SU-2014:0797 vendor-advisory
- SUSE-SU-2014:0824 vendor-advisory
- openSUSE-SU-2014:0819 vendor-advisory
- openSUSE-SU-2014:0855 vendor-advisory
- openSUSE-SU-2014:0858 vendor-advisory
- 58984 third-party-advisory
- 59229 third-party-advisory
- 59275 third-party-advisory
- 59318 third-party-advisory
- 59377 third-party-advisory
- 59387 third-party-advisory
- 59425 third-party-advisory
- 59486 third-party-advisory
- 59614 third-party-advisory
- DSA-2955 vendor-advisory
- DSA-2960 vendor-advisory
- DSA-2962 vendor-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com
- www.oracle.com
- 67975 vdb-entry
- 1030404 vdb-entry
- USN-2265-1 vendor-advisory
- bugzilla.mozilla.org
- bugzilla.redhat.com
- GLSA-201504-01 vendor-advisory