Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:netscape_portable_runtime:4.9.6:*:*:*:*:*:*:*

part: a version: 4.9.6 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductNetscape Portable Runtime (2df8ce1b-0100-5f04-9ecf-278b912bea84)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/neverware-mirrors/nspr purl2cpe 2026-06-01 10:17:53.295405
pkg:github/servo/nspr purl2cpe 2026-06-01 10:17:53.295406
pkg:gitlab/redhat/nspr purl2cpe 2026-06-01 10:17:53.295407
pkg:rpm/centos/nspr purl2cpe 2026-06-01 10:17:53.295409
pkg:rpm/opensuse/nspr purl2cpe 2026-06-01 10:17:53.295410

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-1545 vulnerable 2026-06-03 14:33:47.683720 Details available
Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.
Published: 2014-06-11T10:00:00.000Z
Updated: 2024-08-06T09:42:36.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5607 vulnerable 2026-06-03 14:33:22.266388 Details available
Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before 2.22.1, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted X.509 certificate, a related issue to CVE-2013-1741.
Published: 2013-11-20T11:00:00.000Z
Updated: 2024-08-06T17:15:21.405Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.