← Vulnerability feed

Vulnerability record · CVE-2014-1545 · published 11 June 2014

CVE-2014-1545: Mozilla netscape portable runtime vulnerability

Mozilla · Netscape Portable Runtime

Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.

10.0 CVSS 2.0 High EPSS 6.3% · top 6.6%
10.0CVSS 2.0 base score
6.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
54References
17 Jun 2026Last modified by NVD

Description

Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html
http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html
http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html
http://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html
http://secunia.com/advisories/58984
http://secunia.com/advisories/59229
http://secunia.com/advisories/59275
http://secunia.com/advisories/59318
http://secunia.com/advisories/59377
http://secunia.com/advisories/59387
http://secunia.com/advisories/59425
http://secunia.com/advisories/59486
http://secunia.com/advisories/59614
http://www.debian.org/security/2014/dsa-2955
http://www.debian.org/security/2014/dsa-2960
http://www.debian.org/security/2014/dsa-2962
http://www.mozilla.org/security/announce/2014/mfsa2014-55.html Vendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
http://www.securityfocus.com/bid/67975
http://www.securitytracker.com/id/1030404
http://www.ubuntu.com/usn/USN-2265-1
https://bugzilla.mozilla.org/show_bug.cgi?id=1018783
https://bugzilla.redhat.com/show_bug.cgi?id=1107432
https://security.gentoo.org/glsa/201504-01
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html
http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html
http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html
http://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html
http://secunia.com/advisories/58984
http://secunia.com/advisories/59229
http://secunia.com/advisories/59275
http://secunia.com/advisories/59318
http://secunia.com/advisories/59377
http://secunia.com/advisories/59387
http://secunia.com/advisories/59425

Track CVE-2014-1545 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.6CVE-2016-1951Mozilla netscape portable runtime integer overflow vulnerabilityMultiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before 4.12 allow remote attackers to cause a denial of service …EPSS 3.1%7.5CVE-2013-5607Mozilla netscape portable runtime vulnerabilityInteger overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefo…EPSS 3.0%

Source: NIST National Vulnerability Database (record CVE-2014-1545), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.