Lucene search

K
debianDebianDEBIAN:DLA-32-1:75FF1
HistoryAug 07, 2014 - 6:21 p.m.

[DLA 32-1] nspr security update

2014-08-0718:21:16
lists.debian.org
20

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.07 Low

EPSS

Percentile

93.9%

Package : nspr
Version : 4.8.6-1+squeeze2
CVE ID : CVE-2014-1545

Abhiskek Arya discovered an out of bounds write in the cvt_t() function of
the NetScape Portable Runtime Library which could result in the execution
of arbitrary code.

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.07 Low

EPSS

Percentile

93.9%