Vulnerability in Netscape Communicator
CVE-1999-1357
Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters.
EPSS: 0.020 (78.7th percentile) — read the EPSS interpretation.
Affected products
- Netscape Communicator — versions 4.04, 4.51
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)