Netscape Communicator

35 CVEs affecting Netscape Communicator. Latest disclosed: 2002-12-31. Critical: 0, High: 0.

Top CVEs affecting Netscape Communicator
CVESeverityScorePublishedSummary
CVE-2002-23382002-12-31The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail)…
CVE-2002-23082002-12-31Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where…
CVE-2002-22842002-12-31Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Ja…
CVE-2002-22482002-12-31Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an a…
CVE-2002-20132002-12-31Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null characte…
CVE-2002-17662002-12-31Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a long face attribut…
CVE-2002-12042002-11-29Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail…
CVE-2002-05932002-06-18Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code…
CVE-2001-09212001-11-21Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields by printing the document into which the…
CVE-2001-05962001-08-02Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.
CVE-2000-11872001-01-09Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form fiel…
CVE-2000-07112000-10-20Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a serve…
CVE-2000-06762000-10-20Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL usin…
CVE-2000-06552000-07-25Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment…
CVE-2000-05172000-05-26Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a differ…
CVE-2000-04092000-05-10Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.
CVE-2000-04062000-05-10Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by r…
CVE-1999-07902000-04-01A remote attacker can read information from a Netscape user's cache via JavaScript.
CVE-2000-00872000-01-12Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an…
CVE-1999-10022000-01-12Netscape Navigator uses weak encryption for storing a user's Netscape mail password.