PT-2003-1705 · Netscape · Netscape

Martin Rakhmanov · Publicado 2003-07-15 · Atualizado 2016-10-18 · CVE-2003-0553

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Netscape version 7.02

Description: A buffer overflow issue exists in the Client Detection Tool (CDT) plugin, specifically in the npcdt.dll file, allowing remote attackers to execute arbitrary code. This can be achieved by sending an attachment with a long filename.

Recommendations: For Netscape version 7.02, consider disabling the CDT plugin (npcdt.dll) to prevent exploitation until a patch is available.

Correção

Identificadores relacionados

CVE-2003-0553

Produtos afetados

Netscape

Referências · 3

• http://jimmers.russia.webmatrixhosting.net/whitepapers/CDTbug.pdf · Nota
• http://marc.info/?l=bugtraq&m=105820193406838&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0553 · Nota de Segurança