CVE-1999-1262
MediumExploitation Probability (EPSS)
Elevated risk73th percentile - higher than 73% of all known CVEs
Summary
Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, violating the Java security model.
Risk Assessment
This could allow remote attackers to conduct unauthorized activities, posing a significant security threat to the system.
Recommendation
It is recommended to upgrade to a newer version of Netscape or implement additional security measures to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Netscape 4.5
See all- CVE-1999-0790Low
A remote attacker can read information from a Netscape user's cache via JavaScript.
- CVE-2000-0034Medium
Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled 'remember passwords.'
- CVE-1999-0425Medium
Talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.
- CVE-1999-0424Low
Talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.
Original NVD description (English source)
Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS