rpm package
opensuse/mozilla-nspr&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/mozilla-nspr&distro=openSUSE%20Tumbleweed
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2015-7183 | — | < 4.12-2.1 | 4.12-2.1 | Nov 5, 2015 | Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote atta | ||
| CVE-2014-1545 | — | < 4.12-2.1 | 4.12-2.1 | Jun 11, 2014 | Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions. |
- CVE-2015-7183Nov 5, 2015affected < 4.12-2.1fixed 4.12-2.1
Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote atta
- CVE-2014-1545Jun 11, 2014affected < 4.12-2.1fixed 4.12-2.1
Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.