Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade phpUpgrade nspr. | Aug 30, 2017 | Jun 11, 2014 |
| Centos_linux | — | Upgrade nspr-develUpgrade nss-pkcs11-develUpgrade nsprUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-toolsUpgrade nss-utilUpgrade nssUpgrade nss-devel | Dec 1, 2016 | Jun 11, 2014 |
| Debian | — | Upgrade icedoveUpgrade iceweaselUpgrade nspr | Jul 30, 2024 | Jun 11, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 17, 2015 |
| Freebsd | — | Upgrade nsprUpgrade thunderbirdUpgrade firefox-esrUpgrade linux-thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Jun 10, 2014 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nspr.Upgrade www-client/firefox. | Oct 30, 2017 | Jun 11, 2014 |
| Oracle Solaris | — | Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Jun 11, 2014 |
| Oracle_linux | — | Upgrade nss-pkcs11-develUpgrade nsprUpgrade nspr-develUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-toolsUpgrade nss-develUpgrade nssUpgrade nss-util | Oct 16, 2024 | Jun 11, 2014 |
| Suse | — | Upgrade mozilla-nspr-x86Upgrade MozillaFirefoxUpgrade libsoftokn3Upgrade mozilla-nss-develUpgrade MozillaFirefox-translations-otherUpgrade libfreebl3-x86Upgrade libfreebl3-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaThunderbird-develUpgrade MozillaFirefox-translationsUpgrade libfreebl3Upgrade mozilla-nsprUpgrade mozilla-nss-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-x86Upgrade libsoftokn3-x86Upgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-develUpgrade mozilla-nspr-develUpgrade libsoftokn3-32bitUpgrade MozillaThunderbirdUpgrade mozilla-nssUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-translations-common | Dec 18, 2015 | Jun 11, 2014 |
| Ubuntu | — | Upgrade libnspr4-0dUpgrade libnspr4 | Nov 8, 2024 | Jun 11, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub