PT-2009-4944 · Netscape · Netscape

528-0444 + 3 · Publicado 2009-07-20 · Atualizado 2018-10-10 · CVE-2009-2542

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Netscape versions 6 and 8

Description The issue allows remote attackers to cause a denial of service due to memory consumption. This is achieved by setting a large integer value for the length property of a Select object.

Recommendations For Netscape versions 6 and 8, consider restricting the use of the Select object or limiting the value range for its length property to prevent excessive memory consumption. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2009-2542

Produtos afetados

Netscape

Referências · 8

• 🔥 http://exploit-db.com/exploits/9160 · Exploit
• 🔥 http://g-sec.lu/one-bug-to-rule-them-all.html · Exploit
• http://securityfocus.com/archive/1/505006/100/0/threaded · Nota
• http://securityfocus.com/archive/1/504988/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2542 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52876 · Nota
• http://securityfocus.com/archive/1/504989/100/0/threaded · Nota
• http://securityfocus.com/archive/1/504969/100/0/threaded · Nota