1907 matches found
CVE-2002-1308
Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression...
CVE-2002-1308
CVE-2002-1308 describes a heap-based buffer overflow in Netscape and Mozilla that can be triggered by a jar: URL referencing a malformed .jar file, causing arbitrary code execution during decompression. The vulnerability affects Mozilla/Netscape components as described in the CVE record and corro...
Mozilla JAR File Decompression Heap Overflow (deprecated)
Binary data 1322.prm...
CVE-2003-1229
X509TrustManager in 1 Java Secure Socket Extension JSSE in SDK and JRE 1.4.0 through 1.4.001, 2 JSSE before 1.0.3, 3 Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and 4 Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in...
CVE-2002-1308
Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression...
Netscape/Mozilla: Exploitable heap corruption via jar: URI handler.
The following is the text of an advisory with a couple of typos fixed that was sent to Netscape in early July. -rw-r--r-- 1 root root 3210 Jul 8 17:07 jar-writeup This was one a several vulnerabilities reported in Netscape/Mozilla over that period. Others included the previously posted zero-width...