Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the file, http, https, and ftp protocols, as demonstrated by Brown Orifice.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Communicator | Netscape | 4.0 (including) | 4.0 (including) |
| Communicator | Netscape | 4.04 (including) | 4.04 (including) |
| Communicator | Netscape | 4.05 (including) | 4.05 (including) |
| Communicator | Netscape | 4.5 (including) | 4.5 (including) |
| Communicator | Netscape | 4.5_beta (including) | 4.5_beta (including) |
| Communicator | Netscape | 4.06 (including) | 4.06 (including) |
| Communicator | Netscape | 4.6 (including) | 4.6 (including) |
| Communicator | Netscape | 4.07 (including) | 4.07 (including) |
| Communicator | Netscape | 4.08 (including) | 4.08 (including) |
| Communicator | Netscape | 4.51 (including) | 4.51 (including) |
| Communicator | Netscape | 4.61 (including) | 4.61 (including) |
| Communicator | Netscape | 4.72 (including) | 4.72 (including) |
| Communicator | Netscape | 4.73 (including) | 4.73 (including) |
| Communicator | Netscape | 4.74 (including) | 4.74 (including) |