CVE-2014-1545

Published: Jun 11, 2014Modified: May 6, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.

Affected (45)

Products: Mozilla: Netscape Portable Runtime

1 product

Netscape Portable Runtime

Configuration A

45 vulnerable

Vulnerable Software	Affected Versions
Mozilla Netscape Portable Runtime	Up to 4.10.5
Mozilla Netscape Portable Runtime	Version 4.1.1
Mozilla Netscape Portable Runtime	Version 4.1.2
Mozilla Netscape Portable Runtime	Version 4.10.1
Mozilla Netscape Portable Runtime	Version 4.10.2
Mozilla Netscape Portable Runtime	Version 4.10.3
Mozilla Netscape Portable Runtime	Version 4.10.4
Mozilla Netscape Portable Runtime	Version 4.10
Mozilla Netscape Portable Runtime	Version 4.2.2
Mozilla Netscape Portable Runtime	Version 4.2
Mozilla Netscape Portable Runtime	Version 4.3
Mozilla Netscape Portable Runtime	Version 4.4.1
Mozilla Netscape Portable Runtime	Version 4.5.1
Mozilla Netscape Portable Runtime	Version 4.6.1
Mozilla Netscape Portable Runtime	Version 4.6.2
Mozilla Netscape Portable Runtime	Version 4.6.3
Mozilla Netscape Portable Runtime	Version 4.6.4
Mozilla Netscape Portable Runtime	Version 4.6.5
Mozilla Netscape Portable Runtime	Version 4.6.6
Mozilla Netscape Portable Runtime	Version 4.6.7
Mozilla Netscape Portable Runtime	Version 4.6.8
Mozilla Netscape Portable Runtime	Version 4.6
Mozilla Netscape Portable Runtime	Version 4.7.1
Mozilla Netscape Portable Runtime	Version 4.7.2
Mozilla Netscape Portable Runtime	Version 4.7.3
Mozilla Netscape Portable Runtime	Version 4.7.4
Mozilla Netscape Portable Runtime	Version 4.7.5
Mozilla Netscape Portable Runtime	Version 4.7.6
Mozilla Netscape Portable Runtime	Version 4.7
Mozilla Netscape Portable Runtime	Version 4.8.2
Mozilla Netscape Portable Runtime	Version 4.8.3
Mozilla Netscape Portable Runtime	Version 4.8.4
Mozilla Netscape Portable Runtime	Version 4.8.5
Mozilla Netscape Portable Runtime	Version 4.8.6
Mozilla Netscape Portable Runtime	Version 4.8.7
Mozilla Netscape Portable Runtime	Version 4.8.8
Mozilla Netscape Portable Runtime	Version 4.8.9
Mozilla Netscape Portable Runtime	Version 4.8
Mozilla Netscape Portable Runtime	Version 4.9.1
Mozilla Netscape Portable Runtime	Version 4.9.2
Mozilla Netscape Portable Runtime	Version 4.9.3
Mozilla Netscape Portable Runtime	Version 4.9.4
Mozilla Netscape Portable Runtime	Version 4.9.5
Mozilla Netscape Portable Runtime	Version 4.9.6
Mozilla Netscape Portable Runtime	Version 4.9

References (54)

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html

Source: security@mozilla.org

http://secunia.com/advisories/58984

Source: security@mozilla.org

http://secunia.com/advisories/59229

Source: security@mozilla.org

http://secunia.com/advisories/59275

Source: security@mozilla.org

http://secunia.com/advisories/59318

Source: security@mozilla.org

http://secunia.com/advisories/59377

Source: security@mozilla.org

http://secunia.com/advisories/59387

Source: security@mozilla.org

http://secunia.com/advisories/59425

Source: security@mozilla.org

http://secunia.com/advisories/59486

Source: security@mozilla.org

http://secunia.com/advisories/59614

Source: security@mozilla.org

http://www.debian.org/security/2014/dsa-2955

Source: security@mozilla.org

http://www.debian.org/security/2014/dsa-2960

Source: security@mozilla.org

http://www.debian.org/security/2014/dsa-2962

Source: security@mozilla.org

http://www.mozilla.org/security/announce/2014/mfsa2014-55.html

Source: security@mozilla.org

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: security@mozilla.org

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: security@mozilla.org

http://www.securityfocus.com/bid/67975

Source: security@mozilla.org

http://www.securitytracker.com/id/1030404

Source: security@mozilla.org

http://www.ubuntu.com/usn/USN-2265-1

Source: security@mozilla.org

https://bugzilla.mozilla.org/show_bug.cgi?id=1018783

Source: security@mozilla.org

https://bugzilla.redhat.com/show_bug.cgi?id=1107432

Source: security@mozilla.org

https://security.gentoo.org/glsa/201504-01

Source: security@mozilla.org

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/58984

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59229

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59275

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59318

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59377

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59387

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59425

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59486

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59614

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-2955

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-2960

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-2962

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/2014/mfsa2014-55.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/67975

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1030404

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2265-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=1018783

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1107432

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201504-01

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.