CVE-2000-0655

Severity

50%

Complexity

99%

Confidentiality

48%

Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1.

CVSS 2.0 Base Score 5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P).

Overview

Type

Netscape Communicator

First reported 24 years ago

2000-07-25 04:00:00

Last updated 16 years ago

2008-09-10 19:05:00

Affected Software

Netscape Communicator 4.0

4.0

Netscape Communicator 4.05

4.05

Netscape Communicator 4.5

4.5

Netscape Communicator 4.5 BETA

4.5_beta

Netscape Communicator 4.06

4.06

Netscape Communicator 4.6

4.6

Netscape Communicator 4.07

4.07

Netscape Communicator 4.7

4.7

Netscape Communicator 4.08

4.08

Netscape Communicator 4.51

4.51

Netscape Communicator 4.61

4.61

Netscape Communicator 4.72

4.72

Netscape Communicator 4.73

4.73

References

FreeBSD-SA-00:39

NetBSD-SA2000-011

20000801 MDKSA-2000:027-1 netscape update

20000810 Conectiva Linux Security Announcement - netscape

20000823 Security Hole in Netscape, Versions 4.x, possibly others

RHSA-2000:046

1503

20000724 JPEG COM Marker Processing Vulnerability in Netscape Browsers

Exploit, Patch, Vendor Advisory

TLSA2000017-1

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.