Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:netscape_portable_runtime:4.6.6:*:*:*:*:*:*:*

part: a version: 4.6.6 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductNetscape Portable Runtime (2df8ce1b-0100-5f04-9ecf-278b912bea84)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/neverware-mirrors/nspr purl2cpe 2026-06-01 10:17:53.295236
pkg:github/servo/nspr purl2cpe 2026-06-01 10:17:53.295237
pkg:gitlab/redhat/nspr purl2cpe 2026-06-01 10:17:53.295239
pkg:rpm/centos/nspr purl2cpe 2026-06-01 10:17:53.295240
pkg:rpm/opensuse/nspr purl2cpe 2026-06-01 10:17:53.295241

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-1545 vulnerable 2026-06-03 14:33:47.671628 Details available
Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.
Published: 2014-06-11T10:00:00.000Z
Updated: 2024-08-06T09:42:36.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5607 vulnerable 2026-06-03 14:33:22.254189 Details available
Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before 2.22.1, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted X.509 certificate, a related issue to CVE-2013-1741.
Published: 2013-11-20T11:00:00.000Z
Updated: 2024-08-06T17:15:21.405Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.