REDHAT-BUG-1107432: Medium severity mozilla network security services (nspr) vulnerability
Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team reported an out of bounds write in the Netscape Portable Runtime (NSPR) leading to a potentially exploitable crash or code execution. This issue is fixed in NSPR version 4.10.6.
This NSPR flaw was not exposed to web content in any shipped version of Firefox.
External Reference:
http://www.mozilla.org/security/announce/2014/mfsa2014-55.html
Acknowledgements:
Red Hat would like to thank the Mozilla project for reporting this issue. Upstream acknowledges Abhishek Arya as the original reporter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1107432?
REDHAT-BUG-1107432 has a high severity due to the potential for an out of bounds write leading to crash or code execution.
How do I fix REDHAT-BUG-1107432?
To fix REDHAT-BUG-1107432, update to NSPR version 4.10.6 or later.
Which software is affected by REDHAT-BUG-1107432?
REDHAT-BUG-1107432 affects Mozilla Network Security Services (NSPR) versions prior to 4.10.6.
Can REDHAT-BUG-1107432 lead to unauthorized access?
Yes, REDHAT-BUG-1107432 could potentially allow malicious code execution, leading to unauthorized access.
Is there a known exploit for REDHAT-BUG-1107432?
While there is no public evidence of exploits being actively used, the vulnerability has the potential to be exploited.