GCVE - cpe:2.3:a:mozilla:netscape_portable_runtime:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:netscape_portable_runtime:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mozilla (`be1b0d4e-21a7-5a25-9982-bbda6ef43ec1`)
Product	Netscape Portable Runtime (`2df8ce1b-0100-5f04-9ecf-278b912bea84`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/neverware-mirrors/nspr`	purl2cpe	2026-06-01 10:17:53.294974
`pkg:github/servo/nspr`	purl2cpe	2026-06-01 10:17:53.294977
`pkg:gitlab/redhat/nspr`	purl2cpe	2026-06-01 10:17:53.294980
`pkg:rpm/centos/nspr`	purl2cpe	2026-06-01 10:17:53.294982
`pkg:rpm/opensuse/nspr`	purl2cpe	2026-06-01 10:17:53.294985

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-1951`	vulnerable	2026-06-03 14:35:36.146150	Details available Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before 4.12 allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long string to a PR_*printf function. Published: 2016-08-07T19:00:00.000Z Updated: 2024-08-05T23:10:40.392Z Open on db.gcve.eu Reference links https://groups.google.com/forum/message/raw?msg=mozilla.dev.tech.nspr/dV4MyMsg6jw/hhWcXOgJDQAJ http://www.securityfocus.com/bid/92385 http://www.securitytracker.com/id/1036590 https://hg.mozilla.org/projects/nspr/rev/96381e3aaae2 https://bugzilla.mozilla.org/show_bug.cgi?id=1174015	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1545`	vulnerable	2026-06-03 14:33:47.664527	Details available Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions. Published: 2014-06-11T10:00:00.000Z Updated: 2024-08-06T09:42:36.276Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://secunia.com/advisories/59229 http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html http://secunia.com/advisories/59387	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5607`	vulnerable	2026-06-03 14:33:22.246909	Details available Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before 2.22.1, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted X.509 certificate, a related issue to CVE-2013-1741. Published: 2013-11-20T11:00:00.000Z Updated: 2024-08-06T17:15:21.405Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://www.debian.org/security/2013/dsa-2820 https://security.gentoo.org/glsa/201504-01 http://www.ubuntu.com/usn/USN-2087-1 https://bugzilla.mozilla.org/show_bug.cgi?id=927687	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.