Mozilla Netscape Portable Runtime vulnerabilities

3 CVEs affecting Mozilla Netscape Portable Runtime, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-1951, published 2016-08-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-1545, published 2014-06-11. High severity, CVSS 10.0. EPSS: 6.3% chance of exploitation in the next 30 days. Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and…
CVE-2016-1951, published 2016-08-07. High severity, CVSS 8.6. EPSS: 3.1% chance of exploitation in the next 30 days. Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before 4.12 allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified…
CVE-2013-5607, published 2013-11-20. High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days. Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1,…