REDHAT-BUG-1107432
First published: Tue Jun 10 2014(Updated: )
Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team reported an out of bounds write in the Netscape Portable Runtime (NSPR) leading to a potentially exploitable crash or code execution. This issue is fixed in NSPR version 4.10.6. This NSPR flaw was not exposed to web content in any shipped version of Firefox. External Reference: <a href="http://www.mozilla.org/security/announce/2014/mfsa2014-55.html">http://www.mozilla.org/security/announce/2014/mfsa2014-55.html</a> Acknowledgements: Red Hat would like to thank the Mozilla project for reporting this issue. Upstream acknowledges Abhishek Arya as the original reporter.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Network Security Services (NSPR) | <4.10.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.mozilla.org/security/announce/2014/mfsa2014-55.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1115783
- https://rhn.redhat.com/errata/RHSA-2014-0917.html
- https://rhn.redhat.com/errata/RHSA-2014-1246.html
- https://rhn.redhat.com/errata/RHBA-2015-0364.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1107432
Frequently Asked Questions
What is the severity of REDHAT-BUG-1107432?
REDHAT-BUG-1107432 has a high severity due to the potential for an out of bounds write leading to crash or code execution.
How do I fix REDHAT-BUG-1107432?
To fix REDHAT-BUG-1107432, update to NSPR version 4.10.6 or later.
Which software is affected by REDHAT-BUG-1107432?
REDHAT-BUG-1107432 affects Mozilla Network Security Services (NSPR) versions prior to 4.10.6.
Can REDHAT-BUG-1107432 lead to unauthorized access?
Yes, REDHAT-BUG-1107432 could potentially allow malicious code execution, leading to unauthorized access.
Is there a known exploit for REDHAT-BUG-1107432?
While there is no public evidence of exploits being actively used, the vulnerability has the potential to be exploited.
- agent/type
- agent/references
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2014-1545
- agent/severity
- agent/event
- agent/description
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/mozilla
- canonical/mozilla network security services (nspr)