CVE-2016-1951

High

Published: 07/08/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before version 4.12 allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long string to a PR_*printf function.

Risk Assessment

Attackers may exploit this vulnerability to disrupt system operations, potentially leading to service downtime. There is also a risk of unspecified impacts on application security.

Recommendation

It is recommended to upgrade to NSPR version 4.12 or later to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Mozilla Netscape Portable Runtime (NSPR)

CVE-2014-1545High
Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.

Original NVD description (English source)

Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before 4.12 allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long string to a PR_*printf function.