CVE-2014-1545

Severity

99%

Complexity

99%

Confidentiality

165%

Per: http://cwe.mitre.org/data/definitions/787.html "CWE-787: Out-of-bounds Write"

Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.

Per: http://cwe.mitre.org/data/definitions/787.html "CWE-787: Out-of-bounds Write"

CVSS 2.0 Base Score 9.9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C).

Overview

Type

Mozilla Netscape Portable Runtime (NSPR)

First reported 10 years ago

2014-06-11 10:57:00

Last updated 7 years ago

2017-12-28 02:29:00

Affected Software

Mozilla Netscape Portable Runtime (NSPR) 4.1.1

4.1.1

Mozilla Netscape Portable Runtime (NSPR) 4.1.2

4.1.2

Mozilla Netscape Portable Runtime (NSPR) 4.2

4.2

Mozilla Netscape Portable Runtime (NSPR) 4.2.2

4.2.2

Mozilla Netscape Portable Runtime (NSPR) 4.3

4.3

Mozilla Netscape Portable Runtime (NSPR) 4.4.1

4.4.1

Mozilla Netscape Portable Runtime (NSPR) 4.5.1

4.5.1

Mozilla Netscape Portable Runtime (NSPR) 4.6

4.6

Mozilla Netscape Portable Runtime (NSPR) 4.6.1

4.6.1

Mozilla Netscape Portable Runtime (NSPR) 4.6.2

4.6.2

Mozilla Netscape Portable Runtime (NSPR) 4.6.3

4.6.3

Mozilla Netscape Portable Runtime (NSPR) 4.6.4

4.6.4

Mozilla Netscape Portable Runtime (NSPR) 4.6.5

4.6.5

Mozilla Netscape Portable Runtime (NSPR) 4.6.6

4.6.6

Mozilla Netscape Portable Runtime (NSPR) 4.6.7

4.6.7

Mozilla Netscape Portable Runtime (NSPR) 4.6.8

4.6.8

Mozilla Netscape Portable Runtime (NSPR) 4.7

4.7

Mozilla Netscape Portable Runtime (NSPR) 4.7.1

4.7.1

Mozilla Netscape Portable Runtime (NSPR) 4.7.2

4.7.2

Mozilla Netscape Portable Runtime (NSPR) 4.7.3

4.7.3

Mozilla Netscape Portable Runtime (NSPR) 4.7.4

4.7.4

Mozilla Netscape Portable Runtime (NSPR) 4.7.5

4.7.5

Mozilla Netscape Portable Runtime (NSPR) 4.7.6

4.7.6

Mozilla Netscape Portable Runtime (NSPR) 4.8

4.8

Mozilla Netscape Portable Runtime (NSPR) 4.8.2

4.8.2

Mozilla Netscape Portable Runtime (NSPR) 4.8.3

4.8.3

Mozilla Netscape Portable Runtime (NSPR) 4.8.4

4.8.4

Mozilla Netscape Portable Runtime (NSPR) 4.8.5

4.8.5

Mozilla Netscape Portable Runtime (NSPR) 4.8.6

4.8.6

Mozilla Netscape Portable Runtime (NSPR) 4.8.7

4.8.7

Mozilla Netscape Portable Runtime (NSPR) 4.8.8

4.8.8

Mozilla Netscape Portable Runtime (NSPR) 4.8.9

4.8.9

Mozilla Netscape Portable Runtime (NSPR) 4.9

4.9

Mozilla Netscape Portable Runtime (NSPR) 4.9.1

4.9.1

Mozilla Netscape Portable Runtime (NSPR) 4.9.2

4.9.2

Mozilla Netscape Portable Runtime (NSPR) 4.9.3

4.9.3

Mozilla Netscape Portable Runtime (NSPR) 4.9.4

4.9.4

Mozilla Netscape Portable Runtime (NSPR) 4.9.5

4.9.5

Mozilla Netscape Portable Runtime (NSPR) 4.9.6

4.9.6

Mozilla Netscape Portable Runtime (NSPR) 4.10

4.10

Mozilla Netscape Portable Runtime (NSPR) 4.10.1

4.10.1

Mozilla Netscape Portable Runtime (NSPR) 4.10.2

4.10.2

Mozilla Netscape Portable Runtime (NSPR) 4.10.3

4.10.3

Mozilla Netscape Portable Runtime (NSPR) 4.10.4

4.10.4

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761

openSUSE-SU-2014:0797

SUSE-SU-2014:0824

openSUSE-SU-2014:0819

openSUSE-SU-2014:0855

openSUSE-SU-2014:0858

58984

59229

59275

59318

59377

59387

59425

59486

59614

DSA-2955

DSA-2960

DSA-2962

http://www.mozilla.org/security/announce/2014/mfsa2014-55.html

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

67975

1030404

USN-2265-1

https://bugzilla.mozilla.org/show_bug.cgi?id=1018783

https://bugzilla.redhat.com/show_bug.cgi?id=1107432

GLSA-201504-01

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.