PT-1997-1218 · Netscape · Netscape

Published 1997-08-01 · Updated 2017-10-10 · CVE-1999-1262

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Netscape version 4.5

Description The issue concerns Java in Netscape, which does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded. This violates the Java security model and could allow remote attackers to conduct unauthorized activities.

Recommendations For Netscape version 4.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1262

Affected Products

Netscape

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-1262 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1727 · Note
• http://securityfocus.com/archive/1/12231 · Note