CVE-2014-1545
Fixed in a distro release EPSS 6%
Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.
Products: mozilla netscape_portable_runtime
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | nspr | 2:4.10.6-1 |
| Debian 13 | nspr | 2:4.10.6-1 |
| Debian 14 | nspr | 2:4.10.6-1 |
| Debian 6.0 | nspr | 4.8.6-1+squeeze2 |
| Debian 7 | icedove | 24.6.0-1~deb7u1 |
| Debian 7 | iceweasel | 24.6.0esr-1~deb7u1 |
| Debian 7 | nspr | 2:4.9.2-1+deb7u2 |
| Red Hat Enterprise Linux 5 | nss | 0:3.16.1-2.el5 |
| Red Hat Enterprise Linux 5 | nss-debuginfo | 0:3.16.1-2.el5 |
| Red Hat Enterprise Linux 5 | nss-devel | 0:3.16.1-2.el5 |
| Red Hat Enterprise Linux 5 | nss-pkcs11-devel | 0:3.16.1-2.el5 |
| Red Hat Enterprise Linux 5 | nss-tools | 0:3.16.1-2.el5 |
| Red Hat Enterprise Linux 6 | nspr | 0:4.10.6-1.el6_5 |
| Red Hat Enterprise Linux 6 | nspr-debuginfo | 0:4.10.6-1.el6_5 |
| Red Hat Enterprise Linux 6 | nspr-devel | 0:4.10.6-1.el6_5 |
| Red Hat Enterprise Linux 6 | nss | 0:3.16.1-4.el6_5 |
| Red Hat Enterprise Linux 6 | nss-debuginfo | 0:3.16.1-4.el6_5 |
| Red Hat Enterprise Linux 6 | nss-devel | 0:3.16.1-4.el6_5 |
| Red Hat Enterprise Linux 6 | nss-pkcs11-devel | 0:3.16.1-4.el6_5 |
| Red Hat Enterprise Linux 6 | nss-sysinit | 0:3.16.1-4.el6_5 |
| Red Hat Enterprise Linux 6 | nss-tools | 0:3.16.1-4.el6_5 |
| Red Hat Enterprise Linux 6 | nss-util | 0:3.16.1-1.el6_5 |
| Red Hat Enterprise Linux 6 | nss-util-debuginfo | 0:3.16.1-1.el6_5 |
| Red Hat Enterprise Linux 6 | nss-util-devel | 0:3.16.1-1.el6_5 |
| Red Hat Enterprise Linux 7 | nspr | 0:4.10.6-3.el7 |
| Red Hat Enterprise Linux 7 | nspr-debuginfo | 0:4.10.6-3.el7 |
| Red Hat Enterprise Linux 7 | nspr-devel | 0:4.10.6-3.el7 |
| Red Hat Enterprise Linux 7 | nss | 0:3.16.2.3-5.el7 |
| Red Hat Enterprise Linux 7 | nss-debuginfo | 0:3.16.2.3-5.el7 |
| Red Hat Enterprise Linux 7 | nss-devel | 0:3.16.2.3-5.el7 |
| Red Hat Enterprise Linux 7 | nss-pkcs11-devel | 0:3.16.2.3-5.el7 |
| Red Hat Enterprise Linux 7 | nss-softokn | 0:3.16.2.3-9.el7 |
| Red Hat Enterprise Linux 7 | nss-softokn-debuginfo | 0:3.16.2.3-9.el7 |
| Red Hat Enterprise Linux 7 | nss-softokn-devel | 0:3.16.2.3-9.el7 |
| Red Hat Enterprise Linux 7 | nss-softokn-freebl | 0:3.16.2.3-9.el7 |
| Red Hat Enterprise Linux 7 | nss-softokn-freebl-devel | 0:3.16.2.3-9.el7 |
| Red Hat Enterprise Linux 7 | nss-sysinit | 0:3.16.2.3-5.el7 |
| Red Hat Enterprise Linux 7 | nss-tools | 0:3.16.2.3-5.el7 |
| Red Hat Enterprise Linux 7 | nss-util | 0:3.16.2.3-2.el7 |
| Red Hat Enterprise Linux 7 | nss-util-debuginfo | 0:3.16.2.3-2.el7 |
| Red Hat Enterprise Linux 7 | nss-util-devel | 0:3.16.2.3-2.el7 |
| Ubuntu 14.04 LTS | nspr | 2:4.10.2-1ubuntu1.1 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |
| openSUSE Tumbleweed | mozilla-nspr | 4.12-2.1 |