PT-2003-1705 · Netscape · Netscape

Martin Rakhmanov · Published 2003-07-15 · Updated 2016-10-18 · CVE-2003-0553

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Netscape version 7.02

Description: A buffer overflow issue exists in the Client Detection Tool (CDT) plugin, specifically in the npcdt.dll file, allowing remote attackers to execute arbitrary code. This can be achieved by sending an attachment with a long filename.

Recommendations: For Netscape version 7.02, consider disabling the CDT plugin (npcdt.dll) to prevent exploitation until a patch is available.

Fix

Related Identifiers

CVE-2003-0553

Affected Products

Netscape

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2003-0553 · Security Note
• http://jimmers.russia.webmatrixhosting.net/whitepapers/CDTbug.pdf · Note
• http://marc.info/?l=bugtraq&m=105820193406838&w=2 · Note