Netscape 7.x/8.x Exception Handling Full Path Disclosure Wea

Firefox, Thunderbird, SeaMonkey, Camino, Mozilla, Netscape 6/7/8/9, and all Gecko-based browsers discussion and support forum.
(MozInfo701, Netscape Browser Archive)

Moderators: Antony, Edward, profman, Ramona

Netscape 7.x/8.x Exception Handling Full Path Disclosure Wea

Postby Ramona » Tue 23 May, 2006 8:47 pm

TITLE:
Netscape Exception Handling Full Path Disclosure Weakness

SECUNIA ADVISORY ID:
SA20255

VERIFY ADVISORY:
http://secunia.com/advisories/20255/

CRITICAL:
Not critical

IMPACT:
Exposure of system information

WHERE:
>From remote

SOFTWARE:
Netscape 8.x
http://secunia.com/product/5134/
Netscape 7.x
http://secunia.com/product/85/

DESCRIPTION:
A weakness has been discovered in Netscape, which can be exploited by
malicious people to disclose system information.

For more information:
SA20244

The weakness has been confirmed in versions 7.2 and 8.1. Other
versions may also be affected.

SOLUTION:
Disable JavaScript support.

OTHER REFERENCES:
SA20244:
http://secunia.com/advisories/20244/
UserAgent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3
User avatar
Ramona
Moderator
Moderator
 
Posts: 2376
Joined: Wed 19 Jun, 2002 3:50 pm
Location: Midwest USA

Return to Firefox, SeaMonkey and Netscape

Who is online

Registered users: Google [Bot]