First published: Tue Jul 25 2000(Updated: )
Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netscape Communicator | =4.05 | |
Netscape Communicator | =4.61 | |
Netscape Communicator | =4.07 | |
Netscape Communicator | =4.73 | |
Netscape Communicator | =4.51 | |
Netscape Communicator | =4.06 | |
Netscape Communicator | =4.7 | |
Netscape Communicator | =4.0 | |
Netscape Communicator | =4.08 | |
Netscape Communicator | =4.6 | |
Netscape Communicator | =4.5_beta | |
Netscape Communicator | =4.72 | |
Netscape Communicator | =4.5 | |
Mozilla Mozilla | =m15 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-0655 is classified as a denial of service vulnerability that can be exploited to crash the Netscape Communicator application.
The recommended fix for CVE-2000-0655 is to upgrade Netscape Communicator to a version later than 4.73.
CVE-2000-0655 affects Netscape Communicator versions 4.0 to 4.73 inclusive.
CVE-2000-0655 can be exploited by sending a specially crafted JPEG image containing an illegal field length.
There are no specific workarounds for CVE-2000-0655; upgrading to a safe version is the most effective solution.