Total vulnerabilities in the database
Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail address, and possibly the e-mail password, by redefining the user_pref() function and accessing the prefs.js file, which is stored in a directory with a predictable name.
Software | From | Fixed in |
---|---|---|
netscape / communicator | 4.76 | 4.76.x |
netscape / communicator | 4.77 | 4.77.x |
netscape / communicator | 4.61 | 4.61.x |
netscape / communicator | 4.73 | 4.73.x |
netscape / communicator | 4.7 | 4.7.x |
netscape / communicator | 4.78 | 4.78.x |
netscape / communicator | 4.74 | 4.74.x |
netscape / communicator | 4.6 | 4.6.x |
netscape / communicator | 4.72 | 4.72.x |
netscape / communicator | 4.75 | 4.75.x |