Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netscape communicator 4.07 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-1999-1262
Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote malicious users to conduct unauthorized activities.
Netscape Communicator 4.5Netscape Communicator 4.01Netscape Communicator 4.06Netscape Communicator 4.07Netscape Communicator 4.08
NA
CVE-1999-0174
The view-source CGI program allows remote malicious users to read arbitrary files via a .. (dot dot) attack.
Netscape Communicator 4.05Netscape Communicator 4.07Netscape Communicator 4.51Netscape Communicator 4.06Netscape Communicator 4.0Netscape Communicator 4.6Netscape Communicator 4.5
NA
CVE-2000-0406
Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote malicious users to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL&qu...
Netscape Communicator 4.05Netscape Communicator 4.07Netscape Communicator 4.61Netscape Communicator 4.72Netscape Communicator 4.5Netscape Communicator 4.5 BetaNetscape Communicator 4.51Netscape Communicator 4.6Netscape Communicator 4.0Netscape Communicator 4.06Netscape Communicator 4.7
NA
CVE-2000-0676
Netscape Communicator and Navigator 4.04 up to and including 4.74 allows remote malicious users to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp" protocols, as demonstr...
Netscape Communicator 4.0Netscape Communicator 4.05Netscape Communicator 4.07Netscape Communicator 4.6Netscape Communicator 4.72Netscape Communicator 4.74Netscape Communicator 4.08Netscape Communicator 4.5Netscape Communicator 4.5 BetaNetscape Communicator 4.51Netscape Communicator 4.04Netscape Communicator 4.06Netscape Communicator 4.61Netscape Communicator 4.73
NA
CVE-2000-0655
Netscape Communicator 4.73 and previous versions allows remote malicious users to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1.
Mozilla Mozilla M15Netscape Communicator 4.05Netscape Communicator 4.6Netscape Communicator 4.7Netscape Communicator 4.72Netscape Communicator 4.73Netscape Communicator 4.07Netscape Communicator 4.08Netscape Communicator 4.5Netscape Communicator 4.5 BetaNetscape Communicator 4.0Netscape Communicator 4.06Netscape Communicator 4.51Netscape Communicator 4.61
NA
CVE-2000-0711
Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote malicious users to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.
Netscape Communicator 4.05Microsoft Virtual Machine 3100Netscape Communicator 4.04Netscape Communicator 4.61Netscape Communicator 4.07Netscape Communicator 4.73Netscape Communicator 4.51Netscape Communicator 4.06Microsoft Virtual Machine 3200Netscape Communicator 4.7Netscape Communicator 4.0Microsoft Virtual Machine 3300Netscape Communicator 4.74Netscape Communicator 4.08Netscape Communicator 4.6Microsoft Virtual Machine 2000Netscape Communicator 4.72Netscape Communicator 4.5
NA
CVE-2002-2013
Mozilla 0.9.6 and previous versions and Netscape 6.2 and previous versions allows remote malicious users to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
Mozilla Mozilla 0.9.2Mozilla Mozilla 0.9.2.1Netscape Communicator 4.6Netscape Communicator 4.61Netscape Communicator 4.7Netscape Communicator 4.72Netscape Communicator 4.0Netscape Communicator 4.06Netscape Communicator 4.07Netscape Communicator 4.08Netscape Communicator 4.77Netscape Communicator 4.78Netscape Navigator 4.77Netscape Navigator 6.0Mozilla Mozilla 0.9.4Mozilla Mozilla 0.9.5Netscape Communicator 4.5Netscape Communicator 4.51Netscape Communicator 4.73Netscape Communicator 4.75Netscape Navigator 6.1Mozilla Mozilla 0.9.3
NA
CVE-2002-2338
The POP3 mail client in Mozilla 1.0 and previous versions, and Netscape Communicator 4.7 and previous versions, allows remote malicious users to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the me...
Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.8Mozilla Mozilla 1.0Netscape Communicator 4.07Netscape Communicator 4.4Netscape Communicator 4.73Netscape Communicator 4.75Netscape Navigator 6.2Netscape Navigator 6.2.2Mozilla Mozilla 0.9.4Mozilla Mozilla 0.9.4.1Mozilla Mozilla 0.9.5Mozilla Mozilla 0.9.6Netscape Communicator 4.51Netscape Communicator 4.6Netscape Communicator 4.61Netscape Communicator 4.7Netscape Communicator 4.0Netscape Communicator 4.06Netscape Communicator 4.77Netscape Navigator 6.0Netscape Navigator 6.01
NA
CVE-1999-0440
The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
Netscape Communicator 4.5Netscape Navigator 4.06Netscape Navigator 4.07Netscape Navigator 4.02Netscape Navigator 4.03Sun JavaNetscape Navigator 4.04Netscape Navigator 4.05Netscape Navigator 4.0Netscape Navigator 4.01Netscape Navigator 4.08Netscape Navigator 4.5Netscape Navigator 4.61
NA
CVE-2002-2281
Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 up to and including 4.8 allows remote malicious users to execute arbitrary Java commands via an applet that uses a jump call, which is not correctly compiled by the JIT compiler.
Symantec Java 4.07Symantec Java 4.08Symantec Java 4.72Symantec Java 4.73Symantec Java 4.74Symantec Java 4.4Symantec Java 4.5Symantec Java 4.75Symantec Java 4.76Symantec Java 4.0Symantec Java 4.06Symantec Java 4.61Symantec Java 4.7Symantec Java 4.79Symantec Java 4.51Symantec Java 4.6Symantec Java 4.77Symantec Java 4.78
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook