CVE-2003-1229

X509TrustManager in 1 Java Secure Socket Extension JSSE in SDK and JRE 1.4.0 through 1.4.001, 2 JSSE before 1.0.3, 3 Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and 4 Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in...

CVE-2002-1308

Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression...

Netscape/Mozilla: Exploitable heap corruption via jar: URI handler.

The following is the text of an advisory with a couple of typos fixed that was sent to Netscape in early July. -rw-r--r-- 1 root root 3210 Jul 8 17:07 jar-writeup This was one a several vulnerabilities reported in Netscape/Mozilla over that period. Others included the previously posted zero-width...