LOL: Netscape hole

Furmanek, Greg Greg.Furmanek@hit.cendant.com
Tue, 28 Nov 2000 10:29:15 -0500


Talking about problems with Netscape.

I seem to have a problem using 
the address book.

The program crashes if I want to fill
in address using Address Book
on e-mail.

Has anyone else had this problem?

RH 7.0
AMD 450
Updated Packages.
(It wasn't working before the update.)

The Wolf

-> -----Original Message-----
-> From: sinck@ugive.com [mailto:sinck@ugive.com]
-> Sent: Monday, November 27, 2000 2:14 PM
-> To: plug-discuss@lists.PLUG.phoenix.az.us
-> Subject: OMG: LOL: Netscape hole
-> 
-> 
-> 
-> From Bugtraq:
-> 
->   | 
-> ---------------------------------------------------------------------
->   |                    Red Hat, Inc. Security Advisory
->   | 
->   | Synopsis:          New Netscape packages available
->   | Advisory ID:       RHSA-2000:109-05
->   | Issue date:        2000-11-17
->   | Updated on:        2000-11-27
->   | Product:           Red Hat Linux
->   | Keywords:          netscape HTML buffer overflow
->   | Cross references:  N/A
->   | 
-> ---------------------------------------------------------------------
->   | 
->   | 1. Topic:
->   | 
->   | New Netscape packages are available that fix a buffer overflow
->   | in parsing HTML.
->   | 
->   | It is recommended that all Netscape users update to the fixed
->   | packages.
->   | 
->   | [...]
->   | 
->   | 3. Problem description:
->   | 
->   | A buffer overflow exists in Netscape's HTML parsing code. By
->   | using specially designed code, a remote website could cause
->   | arbitrary code to be run on the local machine.
-> 
-> Now there is a hole.  Gives a hole new meaning to "dynamic html".
-> 
-> David
-> 
-> ________________________________________________
-> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your 
-> mail doesn't post to the list quickly and you use Netscape 
-> to write mail.
-> 
-> Plug-discuss mailing list  -  Plug-discuss@lists.PLUG.phoenix.az.us
-> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
->