CVE-1999-0425
MediumExploitation Probability (EPSS)
Elevated risk66th percentile - higher than 66% of all known CVEs
Summary
Talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.
Risk Assessment
This vulnerability may lead to unauthorized termination of processes, potentially disrupting the work of other users and affecting system stability.
Recommendation
It is recommended to upgrade to a newer version of Netscape to mitigate this vulnerability and restrict access to the Talkback feature.
Other vulnerabilities in Netscape 4.5
See all- CVE-1999-0790Low
A remote attacker can read information from a Netscape user's cache via JavaScript.
- CVE-2000-0034Medium
Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled 'remember passwords.'
- CVE-1999-0424Low
Talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.
- CVE-1999-1262Medium
Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, violating the Java security model.
Original NVD description (English source)
talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

