CVE-2002-0593

5 documents5 sources
Severity
7.5HIGH
EPSS
3.4%
top 12.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla MozillaNetscape CommunicatorNetscape Navigator
Timeline
PublishedJun 18
Latest updateApr 30

Description

Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel name in an IRC URI.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages3 packages

▶NVDmozilla/mozilla0.9.9, 1.0+1
▶NVDnetscape/navigator6.0, 6.01+1

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-h8rh-5fr3-29cc: Buffer overflow in Netscape 6 and Mozilla 1↗2022-04-30
▶
CVEList
CVE-2002-0593: Buffer overflow in Netscape 6 and Mozilla 1↗2002-06-11
▶

📋Vendor Advisories

1
Red Hat
security flaw↗2002-04-30
▶

💬Community

1
Bugzilla
CVE-2002-0593 security flaw↗2018-08-16
▶
CVE-2002-0593 (HIGH CVSS 7.5) | Buffer overflow in Netscape 6 and M | cvebase.io