1178 matches found
CVE-2002-1308
Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression...
CVE-2002-1126
CVE-2002-1126 affects Mozilla 1.1 and earlier and Mozilla-based browsers (e.g., Netscape, Galeon). The issue occurs when loading a new page, where the document referrer is set too quickly, allowing a page to deduce the next URL visited (including manually entered URLs) via the onunload handler. T...
CVE-1999-1189
Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file...
CVE-2001-1066
The CVE-2001-1066 issue affects the Netscape 6.0.1 installation script on Solaris (and related versions) where the installer creates a temporary, predictably named file in a world-writable /tmp directory without proper existence/ownership checks. This enables a local attacker to perform a symlink...
CVE-2002-1308
CVE-2002-1308 describes a heap-based buffer overflow in Netscape and Mozilla that can be triggered by a jar: URL referencing a malformed .jar file, causing arbitrary code execution during decompression. The vulnerability affects Mozilla/Netscape components as described in the CVE record and corro...
CVE-2001-1066
ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack...
CVE-2002-1091
CVE-2002-1091 affects Netscape 6.2.3 and earlier and Mozilla 1.0.1, where a crafted GIF image with zero width can cause heap corruption and arbitrary code execution on remote systems. The connected documents corroborate the vulnerability across multiple advisories (NVD entry; Mandrake MDKSA advis...
CVE-1999-1189
The CVE-1999-1189 issue affects Netscape Navigator/Communicator 4.7 on Windows 95/98. A buffer overflow can be triggered by a long argument after the ? in a URL referencing .asp, .cgi, .html, or .pl, allowing remote denial of service and potentially arbitrary command execution. No remediation det...
Netscape NSS libraries buffer overflow
Buffer overflow during SSL negotiation...
ISS Protection Brief: Netscape NSS Library Remote Compromise
-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Protection Brief August 23, 2004 Protection for Netscape NSS Library Remote Compromise Summary: A vulnerability exists in the Netscape Network Security Services NSS library suite which may result in remote compromise of products making...
Netscape NSS Library SSLv2 Challenge Overflow
The remote host seems to be using the Mozilla Network Security Services NSS Library, a set of libraries designed to support the development of security-enabled client/server applications. There seems to be a flaw in the remote version of this library, in the SSLv2 handling code, that may allow an...
Netscape Messenging Server User Account Enumeration
Binary data 1788.prm...
Netscape < 4.78 POP3 Client Malformed Email DoS
Binary data 1759.prm...
Netscape/Mozilla Null Character Cookie Disclosure (deprecated)
Binary data 1310.prm...
Netscape Messaging Server IMAP LIST Command Remote Overflow (deprecated)
Binary data 1092.prm...
Netscape < 6.2.3 XMLHttpRequest File / Directory Disclosure
Binary data 1755.prm...
Netscape/Mozilla Navigator Plugin Path Disclosure (deprecated)
Binary data 1313.prm...
Netscape/Mozilla/Galeon Local File Enumeration (deprecated)
Binary data 1311.prm...