CVE-2016-1951

Name of the Vulnerable Software and Affected Versions NSPR versions prior to 4.12

Description The issue is caused by multiple integer overflows in the io/prprf.c file of Mozilla Netscape Portable Runtime (NSPR), allowing remote attackers to potentially cause a denial of service or have other unspecified impacts by providing a long string to a PR *printf function.

Recommendations For versions prior to 4.12, update to version 4.12 or later to resolve the issue.