Exploit Netscape 4.77 - Composer Font Face Field Buffer Overflow

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
21544
Проверка EDB
  1. Пройдено
Автор
S[H]IFF
Тип уязвимости
DOS
Платформа
MULTIPLE
CVE
cve-2002-1766
Дата публикации
2002-06-13
HTML:
source: https://www.securityfocus.com/bid/5010/info

Netscape is a freely available web browser distributed by Netscape Communications, and available for various platforms. This vulnerability is known to affect those installations on the Linux platform.

A buffer overflow has been reported in the Composer function of Netscape. When an HTML page with a Font Face field of arbitrary length is edited using Netscape Composer, a memory corruption bug may occur that could allow the overwriting of process memory, and execution of attacker supplied code. 

<html>
<body>

<font face="X">Hola!</font>

</body>
</html>

where X is indicative of 191 or more characters.
 
Источник
www.exploit-db.com

Похожие темы