First published: Tue Dec 31 2002(Updated: )
Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL tag references itself.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netscape Communicator | =6.2.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-2308 is classified as a denial of service vulnerability.
To fix CVE-2002-2308, avoid using Netscape Communicator 6.2.1 or implement network measures to filter out malicious META refresh tags.
The potential impact of CVE-2002-2308 is that it can cause client browsers to crash or become unresponsive.
CVE-2002-2308 specifically affects users of Netscape Communicator version 6.2.1.
While CVE-2002-2308 is an older vulnerability, it may still be relevant for legacy systems using outdated software.