CVE-2000-0655 Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1.
MediumCVSS 5.0
EPSS 12.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla | = m15 | No fix listed |
| netscape communicator | = 4.0 | No fix listed |
| netscape communicator | = 4.05 | No fix listed |
| netscape communicator | = 4.5 | No fix listed |
| netscape communicator | = 4.5_beta | No fix listed |
| netscape communicator | = 4.06 | No fix listed |
| netscape communicator | = 4.6 | No fix listed |
| netscape communicator | = 4.07 | No fix listed |
| netscape communicator | = 4.7 | No fix listed |
| netscape communicator | = 4.08 | No fix listed |
| netscape communicator | = 4.51 | No fix listed |
| netscape communicator | = 4.61 | No fix listed |
| netscape communicator | = 4.72 | No fix listed |
| netscape communicator | = 4.73 | No fix listed |
References
- 20000801 MDKSA-2000:027-1 netscape update mailing-list
- 20000810 Conectiva Linux Security Announcement - netscape mailing-list
- 20000823 Security Hole in Netscape, Versions 4.x, possibly others vendor-advisory
- RHSA-2000:046 vendor-advisory
- 1503 vdb-entry
- 20000724 JPEG COM Marker Processing Vulnerability in Netscape Browsers exploit mailing-list patch vendor-advisory
- TLSA2000017-1 vendor-advisory