Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.
| Software | From | Fixed in |
|---|---|---|
| netscape / communicator | 4.76 | 4.76.x |
| netscape / communicator | 4.77 | 4.77.x |
| netscape / communicator | 4.61 | 4.61.x |
| netscape / communicator | 4.73 | 4.73.x |
| netscape / communicator | 4.51 | 4.51.x |
| netscape / communicator | 4.7 | 4.7.x |
| netscape / communicator | 4.78 | 4.78.x |
| netscape / communicator | 4.0 | 4.0.x |
| netscape / communicator | 4.79 | 4.79.x |
| netscape / communicator | 4.74 | 4.74.x |
| netscape / communicator | 4.6 | 4.6.x |
| netscape / communicator | 4.72 | 4.72.x |
| netscape / communicator | 4.5 | 4.5.x |
| netscape / communicator | 4.75 | 4.75.x |