CVE-1999-0762: Low severity Netscape Communicator vulnerability
When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable execution of JavaScript contained within TITLE tags to prevent scripts in TITLE from leveraging the 'about' protocol to access browser information.
Netscape Communicator / Netscape Navigator execute_javascript_in_title = disabled - Compensating control
Block or filter use of the 'about:' protocol from untrusted content (via browser configuration, policy, or network filtering) to prevent remote pages from using 'about' URIs to obtain browser information.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0762?
CVE-1999-0762 is considered a moderate severity vulnerability due to the risks associated with exposing browser information.
How does CVE-1999-0762 allow attackers access?
CVE-1999-0762 exploits embedded JavaScript in the TITLE tag to gain unauthorized access to browser information via the "about" protocol.
Which versions of Netscape are affected by CVE-1999-0762?
CVE-1999-0762 affects Netscape Communicator 4.6 and earlier versions, as well as Netscape Navigator.
What is the impact of CVE-1999-0762 on user security?
CVE-1999-0762 can lead to unauthorized access to sensitive browser information, posing a risk to user privacy and security.
How can users mitigate the risks associated with CVE-1999-0762?
Users can mitigate CVE-1999-0762 by upgrading to a more secure version of Netscape or using a different, more secure web browser.