CVE-2000-1187: Buffer Overflow
First published: Tue Jan 09 2001(Updated: )
Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netscape Communicator | <=4.75 | |
| Netscape Navigator | <=4.75 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.redhat.com/support/errata/RHSA-2000-109.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000344
- http://lists.suse.com/archives/suse-security-announce/2000-Nov/0005.html
- http://www.osvdb.org/7207
- http://marc.info/?l=bugtraq&m=97500270012529&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5542
Frequently Asked Questions
What is the severity of CVE-2000-1187?
CVE-2000-1187 is classified as a high-severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2000-1187?
To fix CVE-2000-1187, upgrade to a later version of Netscape Communicator or Navigator that is not affected by this vulnerability.
What software is affected by CVE-2000-1187?
CVE-2000-1187 affects Netscape Communicator versions up to 4.75 and Netscape Navigator versions up to 4.75.
What type of vulnerability is CVE-2000-1187?
CVE-2000-1187 is a buffer overflow vulnerability which can be exploited via malicious input in a form field.
Can CVE-2000-1187 lead to data breaches?
Yes, CVE-2000-1187 can lead to data breaches because it allows remote attackers to execute arbitrary commands on the target system.
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- vendor/netscape
- canonical/netscape communicator
- version/netscape communicator/4.75
- canonical/netscape navigator
- version/netscape navigator/4.75