CVE-2002-0593 Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel name in an IRC URI.
HighCVSS 7.5
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel name in an IRC URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla | = 0.9.9 | No fix listed |
| mozilla | = 1.0-rc1 | No fix listed |
| netscape communicator | = 6.1 | No fix listed |
| netscape navigator | = 6.0 | No fix listed |
| netscape navigator | = 6.01 | No fix listed |
References
- CLA-2002:490 vendor-advisory
- 20020430 RE: Reading local files in Netscape 6 and Mozilla (GM#001-NS) mailing-list vendor-advisory
- 8039 third-party-advisory
- mozilla-netscape-irc-bo(8976) vdb-entry
- 4637 exploit patch vdb-entry vendor-advisory