NA
Product
Navigator
44
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Navigator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-2542 | – | Jul 20 | Netscape 6 and 8 allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to… Affected: 6; 8 |
| CVE-2008-2809 | – | Jul 8 | Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user… Affected: 9.0 |
| CVE-2007-4042 | – | Jul 27 | Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1)… Affected: 9.0 |
| CVE-2007-3924 | – | Jul 21 | Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct… Affected: 9.0 |
| CVE-2007-1377 | – | Mar 10 | AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption)… Affected: All versions, or not specified |
| CVE-2006-6077 | – | Nov 24 | The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that… Affected: 8.1.2 |
| CVE-2006-4253 | – | Aug 21 | Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple… Affected: 8.1 |
| CVE-2006-2894 | – | Jun 7 | Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted… Affected: through 8.1 |
| CVE-2006-2613 | – | May 26 | Mozilla Suite 1.7.13, Mozilla Firefox 1.5.0.3 and possibly other versions before before 1.8.0, and Netscape 7.2 and 8.1, and possibly other versions and products, allows remote… Affected: 7.2; 8.1 |
| CVE-2006-1942 | – | Apr 20 | Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via… Affected: 7.2; 8.0.40; 8.1 |
| CVE-2005-4134 | – | Dec 9 | Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via… Affected: through 8.0.40; 7.1; 7.2 |
| CVE-2005-0989 | – | May 2 | The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap… Affected: 7.2 |
| CVE-2005-1157 | – | May 2 | Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and… Affected: 7.2 |
| CVE-2005-1156 | – | May 2 | Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script and code via a new search plugin using… Affected: 7.2 |
| CVE-2004-1160 | – | Jan 10 | Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is… Affected: 7.0; 7.0.2; 7.1; 7.2 |
| CVE-2004-0904 | – | Dec 31 | Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute… Affected: 7.0; 7.0.2; 7.1; 7.2 |
| CVE-2004-1753 | – | Dec 31 | The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle… Affected: 7.1; 7.2 |
| CVE-2004-0905 | – | Sep 14 | Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute… Affected: 7.0; 7.0.2; 7.1; 7.2 |
| CVE-2004-0722 | – | Aug 18 | Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute… Affected: 7.0; 7.1 |
| CVE-2004-0528 | – | Aug 6 | Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined… Affected: 7.1 |
| CVE-2004-0718 | – | Jul 27 | The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that… Affected: 7.1 |
| CVE-2003-1560 | – | Dec 31 | Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading… Affected: 4 |
| CVE-2003-1265 | – | Dec 31 | Netscape 7.0 and Mozilla 5.0 do not immediately delete messages in the trash folder when users select the 'Empty Trash' option, which could allow local users to access deleted… Affected: 7.0 |
| CVE-2003-1419 | – | Dec 31 | Netscape 7.0 allows remote attackers to cause a denial of service (crash) via a web page with an invalid regular expression argument to the JavaScript reformatDate function Affected: 7.0 |
| CVE-2003-1492 | – | Dec 31 | Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra Affected: 7.0.2 |
| CVE-2003-0553 | – | Aug 18 | Buffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02 allows remote attackers to execute arbitrary code via an attachment with a long filename Affected: 7.0.2 |
| CVE-2002-2338 | – | Dec 31 | The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message… Affected: 6.0; 6.0; 6.01; 6.1; 6.2; 6.2.1; +1 more |
| CVE-2002-2061 | – | Dec 31 | Heap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0 and earlier allows remote attackers to crash client browsers and execute arbitrary code via a PNG image with large… Affected: 6.2.3 |
| CVE-2002-2013 | – | Dec 31 | Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by… Affected: 4.77; 6.0; 6.01; 6.1; 6.2 |
| CVE-2002-1308 | – | Nov 29 | Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer… Affected: 6.2; 6.2.1; 6.2.2; 6.2.3; 7.0 |
| CVE-2002-1091 | – | Oct 4 | Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width Affected: 6.2; 6.2.1; 6.2.2; 6.2.3 |
| CVE-2002-0815 | – | Aug 12 | The Javascript "Same Origin Policy" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3) Internet Explorer, allows a remote web server to access HTTP and SOAP/XML content… Affected: All versions, or not specified |
| CVE-2002-0354 | – | Jun 25 | The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that… Affected: 6.1; 6.2 |
| CVE-2002-0593 | – | Jun 18 | Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel… Affected: 6.0; 6.01 |
| CVE-2002-0594 | – | Jun 18 | Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS)… Affected: 6.0; 6.01; 6.1; 6.2; 6.2.1; 6.2.2 |
| CVE-2000-1187 | – | Jan 9 | Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field Affected: through 4.75 |
| CVE-2000-0087 | – | Jan 12 | Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection,… Affected: All versions, or not specified |
| CVE-1999-1189 | – | Nov 24 | Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands,… Affected: 4.7 |
| CVE-1999-0827 | – | Nov 1 | By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing Affected: through 4.5 |
| CVE-1999-0762 | – | May 24 | When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information Affected: All versions, or not specified |
| CVE-1999-0440 | – | Mar 1 | The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages Affected: 4.0; 4.01; 4.02; 4.03; 4.04; 4.05; +5 more |
| CVE-1999-0869 | – | Dec 1 | Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing Affected: All versions, or not specified |
| CVE-1999-0141 | – | Mar 29 | Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet Affected: 2.02 |
| CVE-1999-0142 | – | Mar 1 | The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts Affected: All versions, or not specified |
Showing 44