Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel name in an IRC URI.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mozilla | Mozilla | 0.9.9 (including) | 0.9.9 (including) |
| Mozilla | Mozilla | 1.0-rc1 (including) | 1.0-rc1 (including) |
| Communicator | Netscape | 6.1 (including) | 6.1 (including) |
| Navigator | Netscape | 6.0 (including) | 6.0 (including) |
| Navigator | Netscape | 6.01 (including) | 6.01 (including) |
| Red Hat Enterprise Linux AS (Advanced Server) version 2.1 | RedHat | * | |
| Red Hat Linux 7.2 | RedHat | * | |
| Red Hat Linux 7.3 | RedHat | * | |
| Red Hat Linux 8.0 | RedHat | * |
References
- http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000490
- http://online.securityfocus.com/archive/1/270249
- http://secunia.com/advisories/8039
- http://www.iss.net/security_center/static/8976.php
- http://www.securityfocus.com/bid/4637
- http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000490
- http://online.securityfocus.com/archive/1/270249
- http://secunia.com/advisories/8039
- http://www.iss.net/security_center/static/8976.php
- http://www.securityfocus.com/bid/4637