PT-2016-4939
CVE-2016-1951
·
تاريخ النشر
2016-02-14
·
تاريخ التحديث
2016-11-28
الوصف من
CVSS 3.1
8.6
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Name of the Vulnerable Software and Affected Versions
NSPR versions prior to 4.12
Description
The issue is caused by multiple integer overflows in the io/prprf.c file of Mozilla Netscape Portable Runtime (NSPR), allowing remote attackers to potentially cause a denial of service or have other unspecified impacts by providing a long string to a PR *printf function.
Recommendations
For versions prior to 4.12, update to version 4.12 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾