CVE-2016-1951

8.6HIGH

Key Information:

Vendor
Mozilla
Status
Netscape Portable Runtime
Vendor
CVE Published:
7 August 2016

Summary

Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before 4.12 allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long string to a PR_*printf function.

References

https://groups.google.com/forum/message/raw?msg=mozilla.d...
mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/92385
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1036590
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.