LOL: Netscape hole

George Toft george@georgetoft.com
Tue, 28 Nov 2000 20:26:45 -0700


I have had that problem with every version after 4.08

George


"Furmanek, Greg" wrote:
> 
> Talking about problems with Netscape.
> 
> I seem to have a problem using
> the address book.
> 
> The program crashes if I want to fill
> in address using Address Book
> on e-mail.
> 
> Has anyone else had this problem?
> 
> RH 7.0
> AMD 450
> Updated Packages.
> (It wasn't working before the update.)
> 
> The Wolf
> 
> -> -----Original Message-----
> -> From: sinck@ugive.com [mailto:sinck@ugive.com]
> -> Sent: Monday, November 27, 2000 2:14 PM
> -> To: plug-discuss@lists.PLUG.phoenix.az.us
> -> Subject: OMG: LOL: Netscape hole
> ->
> ->
> ->
> -> From Bugtraq:
> ->
> ->   |
> -> ---------------------------------------------------------------------
> ->   |                    Red Hat, Inc. Security Advisory
> ->   |
> ->   | Synopsis:          New Netscape packages available
> ->   | Advisory ID:       RHSA-2000:109-05
> ->   | Issue date:        2000-11-17
> ->   | Updated on:        2000-11-27
> ->   | Product:           Red Hat Linux
> ->   | Keywords:          netscape HTML buffer overflow
> ->   | Cross references:  N/A
> ->   |
> -> ---------------------------------------------------------------------
> ->   |
> ->   | 1. Topic:
> ->   |
> ->   | New Netscape packages are available that fix a buffer overflow
> ->   | in parsing HTML.
> ->   |
> ->   | It is recommended that all Netscape users update to the fixed
> ->   | packages.
> ->   |
> ->   | [...]
> ->   |
> ->   | 3. Problem description:
> ->   |
> ->   | A buffer overflow exists in Netscape's HTML parsing code. By
> ->   | using specially designed code, a remote website could cause
> ->   | arbitrary code to be run on the local machine.
> ->
> -> Now there is a hole.  Gives a hole new meaning to "dynamic html".
> ->
> -> David
> ->
> -> ________________________________________________
> -> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your
> -> mail doesn't post to the list quickly and you use Netscape
> -> to write mail.
> ->
> -> Plug-discuss mailing list  -  Plug-discuss@lists.PLUG.phoenix.az.us
> -> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> ->
> 
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.
> 
> Plug-discuss mailing list  -  Plug-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss