Netscape Communicator vulnerabilities, page 2
34 vulnerabilities
Known vulnerabilities in Netscape Communicator, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-1999-0425netscapecommunicator
EPSS score1.26%
talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.CVE-1999-0892netscapecommunicatorEPSS score0.40%
Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font.CVE-1999-0174netscapecommunicatorEPSS score6.90%
The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-1999-0809netscapecommunicatorEPSS score1.40%
Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same server as the page being viewed".CVE-1999-0440netscapecommunicator+1EPSS score3.64%
The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.CVE-1999-0790netscapecommunicatorEPSS score1.02%
A remote attacker can read information from a Netscape user's cache via JavaScript.CVE-2002-2284netscapecommunicatorEPSS score2.04%
Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes.CVE-2002-2013mozillamozilla+2EPSS score1.63%
Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.CVE-2002-2338mozillamozilla+2EPSS score3.88%
The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.CVE-2002-2248netscapecommunicatorEPSS score5.79%
Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.CVE-2002-2308netscapecommunicatorEPSS score1.10%
Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL tag references itself.CVE-2002-1204netscapecommunicatorEPSS score1.32%
Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail address, and possibly the e-mail password, by redefining the user_pref() function and accessing the prefs.js file, which is stored in a directory with a predictable name.CVE-2002-1766netscapecommunicatorEPSS score1.01%
Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a long face attribute.CVE-2002-0593mozillamozilla+2EPSS score3.52%
Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel name in an IRC URI.