CVE-2009-2542 — Navigator vulnerability

3 documents3 sources

Severity

4.3MEDIUMNVD

CNA7.1

EPSS

1.1%

top 22.39%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Netscape Navigator

Timeline

PublishedJul 20

Latest updateMay 2

Description

Netscape 6 and 8 allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDnetscape/navigator6, 8+1

🔴Vulnerability Details

GHSA

GHSA-c42p-m5wc-8hf3: Netscape 6 and 8 allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Sele↗2022-05-02

▶

CVEList

CVE-2009-2542: Netscape 6 and 8 allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Sele↗2009-07-20

▶