CVE-2001-0596 Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.
HighCVSS 7.5
EPSS 8.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscape communicator | <= 4.77 | No fix listed |
References
- CLA-2001:393 vendor-advisory
- IMNX-2001-70-014-01 vendor-advisory
- 20010409 Netscape 4.76 gif comment flaw mailing-list
- DSA-051 patch vendor-advisory
- 5579 vdb-entry
- RHSA-2001:046 patch vendor-advisory
- 2637 vdb-entry
- netscape-javascript-access-data(6344) vdb-entry