CVE-2000-1187 Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field.
HighCVSS 7.5
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscape communicator | <= 4.75 | No fix listed |
| netscape navigator | <= 4.75 | No fix listed |
References
- CLSA-2000:344 vendor-advisory
- SuSE-SA:2000:48 vendor-advisory
- 20001121 Immunix OS Security update for netscape mailing-list
- 7207 vdb-entry
- RHSA-2000:109 patch vendor-advisory
- netscape-client-html-bo(5542) vdb-entry