CVE-2016-1951
Fixed in a distro release EPSS 3%
Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before 4.12 allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long string to a PR_*printf function.
Products: mozilla netscape_portable_runtime
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | nspr | 4.12-1 |
| Debian 12 | firefox-esr | 45.0esr-1 |
| Debian 12 | nspr | 2:4.12-1 |
| Debian 13 | firefox-esr | 45.0esr-1 |
| Debian 13 | nspr | 2:4.12-1 |
| Debian 14 | firefox-esr | 45.0esr-1 |
| Debian 14 | nspr | 2:4.12-1 |
| Debian 7 | nspr | 2:4.9.2-1+deb7u4 |
| Debian 8 | nspr | 2:4.12-1+debu8u1 |
| Ubuntu 14.04 LTS | nspr | 2:4.12-0ubuntu0.14.04.1 |
| Ubuntu 14.04 LTS | thunderbird | 1:45.2.0+build1-0ubuntu0.14.04.3 |
| Ubuntu 16.04 LTS | nspr | 2:4.12-0ubuntu0.16.04.1 |
| Ubuntu 16.04 LTS | thunderbird | 1:45.2.0+build1-0ubuntu0.16.04.1 |