Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2013-5607

nspr: Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)

Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before 2.22.1, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted X.509 certificate, a related issue to CVE-2013-1741.

CVSS 2.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Netscape Portable Runtime Seamonkey and 1 more
CVE-2014-1545

Mozilla: Out of bounds write in NSPR (MFSA 2014-55)

Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.

CVSS 2.0 · 10.0 Critical EPSS 6.3% KEV · Not listed
Vendors
Mozilla Redhat
Products
Netscape Portable Runtime Enterprise Linux
CVE-2016-1951

nspr: Memory allocation issue related to PR_*printf functions

Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before 4.12 allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long string to a PR_*printf function.

CVSS 3.0 · 8.6 High EPSS 3.1% KEV · Not listed
Vendors
Mozilla
Products
Netscape Portable Runtime