PT-2009-4944 · Netscape · Netscape

528-0444 + 3 · Published 2009-07-20 · Updated 2018-10-10 · CVE-2009-2542

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Netscape versions 6 and 8

Description The issue allows remote attackers to cause a denial of service due to memory consumption. This is achieved by setting a large integer value for the length property of a Select object.

Recommendations For Netscape versions 6 and 8, consider restricting the use of the Select object or limiting the value range for its length property to prevent excessive memory consumption. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2009-2542

Affected Products

Netscape

References · 8

• 🔥 http://exploit-db.com/exploits/9160 · Exploit
• 🔥 http://g-sec.lu/one-bug-to-rule-them-all.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-2542 · Security Note
• http://securityfocus.com/archive/1/505006/100/0/threaded · Note
• http://securityfocus.com/archive/1/504988/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52876 · Note
• http://securityfocus.com/archive/1/504989/100/0/threaded · Note
• http://securityfocus.com/archive/1/504969/100/0/threaded · Note