Vulnerabilities > Netscape > Communicator > 4.4

DATE CVE VULNERABILITY TITLE RISK
2002-12-31 CVE-2002-2338 Improper Input Validation vulnerability in multiple products
The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.
network
low complexity
mozilla netscape CWE-20
5.0
2002-12-31 CVE-2002-2013 Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
network
low complexity
mozilla netscape
5.0
2001-08-02 CVE-2001-0596 Information Disclosure vulnerability in Netscape Navigator 'about:' Domain
Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.
network
low complexity
netscape
7.5
2001-01-09 CVE-2000-1187 Unspecified vulnerability in Netscape Communicator and Navigator
Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field.
network
low complexity
netscape
7.5
1999-10-28 CVE-1999-1226 Unspecified vulnerability in Netscape Communicator
Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key.
network
high complexity
netscape
2.6
1999-10-05 CVE-1999-1357 Unspecified vulnerability in Netscape Communicator
Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters.
network
low complexity
netscape
7.5