Detections
Analytics
Netscape Browser < 9.0.0.4 Multiple Vulnerabilities
high Nessus Plugin ID 28377
Synopsis
The remote Windows host contains a web browser that is affected by multiple vulnerabilities.Description
The installed version of Netscape is affected by various security issues :- Three bugs that can result in crashes with traces of memory corruption
- A cross-site scripting vulnerability involving support for the 'jar:' URI scheme
- A timing issue when setting the 'window.location' property that could be leveraged to conduct cross-site request forgery attacks.
Solution
The Netscape Browser / Navigator has been discontinued. While these issues were reportedly fixed in 9.0.0.4, it is strongly recommended that you switch to the latest version of another browser, such as Mozilla Firefox, which the Netscape Team recommends.See Also
https://www.mozilla.org/en-US/security/advisories/mfsa2007-37/
https://www.mozilla.org/en-US/security/advisories/mfsa2007-38/
https://www.mozilla.org/en-US/security/advisories/mfsa2007-39/
Plugin Details
Severity: High
ID: 28377
File Name: netscape_browser_9004.nasl
Version: 1.16
Type: local
Agent: windows
Family: Windows
Published: 12/3/2007
Updated: 7/16/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:netscape:navigator
Required KB Items: SMB/Netscape/installed
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 11/9/2007