Red Hat Security Advisory: Netscape security update
Netscape Navigator and Netscape Communicator 4.8 as distributed with Red Hat Enterprise Linux 2.1 contain security flaws and should not be used.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2004-0597US | high10.0 | Exploit | ||
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_… | ||||
| CVE-2004-0598US | medium5.0 | — | ||
The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null deref… | ||||
| CVE-2004-0599US | medium5.0 | — | ||
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 a… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- FixedRed Hat Enterprise Linux ES version 2.1
Red Hat Enterprise 2.1 users who do not need the functionality of Netscape 4.8 should uninstall the netscape packages.
https://access.redhat.com/errata/RHSA-2004:429 - FixedRed Hat Enterprise Linux ES version 2.1
Red Hat Enterprise 2.1 users who do not need the functionality of Netscape 4.8 should uninstall the netscape packages.
https://access.redhat.com/errata/RHSA-2004:429 - FixedRed Hat Enterprise Linux ES version 2.1
Red Hat Enterprise 2.1 users who do not need the functionality of Netscape 4.8 should uninstall the netscape packages.
https://access.redhat.com/errata/RHSA-2004:429 - FixedRed Hat Enterprise Linux WS version 2.1
Red Hat Enterprise 2.1 users who do not need the functionality of Netscape 4.8 should uninstall the netscape packages.
https://access.redhat.com/errata/RHSA-2004:429 - FixedRed Hat Enterprise Linux WS version 2.1
Red Hat Enterprise 2.1 users who do not need the functionality of Netscape 4.8 should uninstall the netscape packages.
https://access.redhat.com/errata/RHSA-2004:429 - FixedRed Hat Enterprise Linux WS version 2.1
Red Hat Enterprise 2.1 users who do not need the functionality of Netscape 4.8 should uninstall the netscape packages.
https://access.redhat.com/errata/RHSA-2004:429
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan