PT-2004-1640 · Netscape · Netscape Navigator

Published 2004-06-08 · Updated 2017-07-11 · CVE-2004-0528

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Netscape Navigator version 7.1

Description The issue allows remote attackers to spoof a legitimate URL in the status bar, facilitating a phishing attack. This is achieved by using A HREF tags with modified alt values that point to the legitimate site, combined with an image map whose href points to the malicious site.

Recommendations For Netscape Navigator version 7.1, consider disabling the use of image maps and modified alt values in A HREF tags to minimize the risk of exploitation. Restrict access to untrusted websites to reduce the likelihood of a phishing attack.

Exploit

Fix

Related Identifiers

CVE-2004-0528

Affected Products

Netscape Navigator

References · 5

• 🔥 https://exploit-db.com/exploits/24137 · Exploit
• 🔥 http://securityfocus.com/bid/10389 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0528 · Security Note
• http://osvdb.org/6580 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16102 · Note