Netscape Navigator 7.2 - Infinite Array Sort Denial of Service

Netscape Navigator 7.2 - Infinite Array Sort Denial of Service source: https://www.securityfocus.com/bid/12331/info Netscape Navigator is prone to a vulnerability that may result in a browser crash. This issue is exposed when the browser performs an infinite JavaScript array sort operation. It is...

Netscape Navigator 7.2 - Infinite Array Sort Denial of Service

source: https://www.securityfocus.com/bid/12331/info Netscape Navigator is prone to a vulnerability that may result in a browser crash. This issue is exposed when the browser performs an infinite JavaScript array sort operation. It is conjectured that this will only result in a denial of service...

[SA13809] Netscape Directory Server LDAP Request Handling Buffer Overflow

TITLE: Netscape Directory Server LDAP Request Handling Buffer Overflow SECUNIA ADVISORY ID: SA13809 VERIFY ADVISORY: http://secunia.com/advisories/13809/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From local network SOFTWARE: Netscape Directory Server 6.x...

security flaw

Buffer overflow in the LDAP component for Netscape Directory Server NDS 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code...

Critical: Red Hat Security Advisory: Netscape Directory Server security update

Patches for Netscape Directory Server that fix a remotely exploitable security issue are now available. In December 2004 Red Hat aquired the Netscape Directory Server product from America Online, Inc. A stack buffer overflow was found in the access control code in Netscape Directory Server 6.21 a...

CVE-2004-1160

Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window...

CVE-2004-1236

Buffer overflow in the LDAP component for Netscape Directory Server NDS 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code...

CVE-2004-1236

The CVE-2004-1236 entry describes a buffer overflow in the LDAP component of Netscape Directory Server (NDS) 3.6 on HP-UX and other OSes, leading to remote code execution. Connected sources confirm a broader class of LDAP buffer-overflow issues across multiple vendors (e.g., HP, Netscape, Hitachi...

CVE-2004-0826

Heap-based buffer overflow in Netscape Network Security Services NSS library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message...

CVE-2004-1236

Buffer overflow in the LDAP component for Netscape Directory Server NDS 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code...

CVE-2004-1753

The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindowNULL calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs...

[Security Bulletin] SSRT4867 rev.0 Netscape Directory Server on HP-UX LDAP remote buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01105 REVISION: 0 SSRT4867 Netscape Directory Server on HP-UX LDAP remote buffer overflow NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in...

Netscape Directory Server buffer overflow

LDAP buffer overflow...

Netscape < 7.2 Cross-domain Window Injection

Binary data 2468.prm...

CVE-2004-1160

CVE-2004-1160 involves Netscape 7.x to 7.2 (and possibly other versions) where a remote attacker can spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain (window injection). The connected OpenVAS/Nessus/FreeBSD Vu...

CVE-2004-1160

Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window...

Microsoft Internet Explorer 6.0 Firefox 0.x Netscape 7.x - IMG Tag Multiple Vulnerabilities

Microsoft Internet Explorer 6.0 Firefox 0.x Netscape 7.x - IMG Tag Multiple Vulnerabilities source: https://www.securityfocus.com/bid/11645/info Various browsers are reported prone to multiple vulnerabilities in the image handling functionality through the tag. These issues can allow remote...

Local file access and code execution in Microsoft Internet Explorer and Netscape/Mozilla XML component

Microsoft's Microsoft.XMLHTTP and Mozilla XMLHttpRequest incorrectly handle redirection allowing to access local files...

Debian DSA-051-1 : netscape - unexpected javascript execution

Florian Wesch has discovered a problem reported to bugtraq with the way how Netscape handles comments in GIF files. The Netscape browser does not escape the GIF file comment in the image information page. This allows JavaScript execution in the 'about:' protocol and can for example be used to...

CVE-2004-0826

Heap-based buffer overflow in Netscape Network Security Services NSS library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message...