Skip to content
OpenAdvisories
Unscored USN-2265-1 1 CVE

nspr vulnerability

Published Jul 2, 2014 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Abhishek Arya discovered that NSPR incorrectly handled certain console
functions. A remote attacker could use this issue to cause NSPR to crash,
resulting in a denial of service, or possibly execute arbitrary code. The
default compiler options for affected releases should reduce the
vulnerability to a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS nspr 2:4.10.2-1ubuntu1.1

Vulnerabilities 1

  • Unscored —
    CVE-2014-1545

    Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a den…

    nspr nspr Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-1545