LOL: Netscape hole

> -> -----Original Message-----
> -> From: sinck@ugive.com [mailto:sinck@ugive.com]
> -> Sent: Monday, November 27, 2000 2:14 PM
> -> To: plug-discuss@lists.PLUG.phoenix.az.us
> -> Subject: OMG: LOL: Netscape hole
> ->
> ->
> ->
> -> From Bugtraq:
> ->
> ->   |
> -> ---------------------------------------------------------------------
> ->   |                    Red Hat, Inc. Security Advisory
> ->   |
> ->   | Synopsis:          New Netscape packages available
> ->   | Advisory ID:       RHSA-2000:109-05
> ->   | Issue date:        2000-11-17
> ->   | Updated on:        2000-11-27
> ->   | Product:           Red Hat Linux
> ->   | Keywords:          netscape HTML buffer overflow
> ->   | Cross references:  N/A
> ->   |
> -> ---------------------------------------------------------------------
> ->   |
> ->   | 1. Topic:
> ->   |
> ->   | New Netscape packages are available that fix a buffer overflow
> ->   | in parsing HTML.
> ->   |
> ->   | It is recommended that all Netscape users update to the fixed
> ->   | packages.
> ->   |
> ->   | [...]
> ->   |
> ->   | 3. Problem description:
> ->   |
> ->   | A buffer overflow exists in Netscape's HTML parsing code. By
> ->   | using specially designed code, a remote website could cause
> ->   | arbitrary code to be run on the local machine.
> ->
> -> Now there is a hole.  Gives a hole new meaning to "dynamic html".
> ->
> -> David
> ->
> -> ________________________________________________
> -> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your
> -> mail doesn't post to the list quickly and you use Netscape
> -> to write mail.
> ->
> -> Plug-discuss mailing list  -  Plug-discuss@lists.PLUG.phoenix.az.us
> -> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> ->