Netscape Critical Flaws Fixed with This Week’s Netscape 8.0.3.1 Release   - 1,246 Views,

Summary: Netscape has this week released Netscape version 8.0.3.1, which fixes four security holes which Netscape calls "critical". Two of these critical security flaws have already been documented, while two others have not, but are nonetheless addressed with 8.0.3.1. The two security flaws which ...

Previous Article « Proof of Windows Legitimacy Becomes Mandatory with Release of Windows Genuine Advantage (WGA) 1.0
Read Next Article » 9 Out of 10 Teens Now Online, Eschew Email, Embrace Instant Messenger

  Follow Anne on Twitter     Friend Anne on Facebook

Netscape has this week released Netscape version 8.0.3.1, which fixes four security holes which Netscape calls “critical”. Two of these critical security flaws have already been documented, while two others have not, but are nonetheless addressed with 8.0.3.1.

The two security flaws which have been documented are a code execution through shared function objects issue, in which “improper cloning of base objects allowed web content scripts to walk up the prototype chain to get to a privileged object,” and a problem where “standalone applications can run arbitrary code through the browser” whereby when a media playser such as Flash or Quicktime opens a URL in the Netscape browser, “if the external URL was a javascript: url it would run as if it came from the site that served the previous content, which could be used to steal sensitive information such as login cookies or passwords. If the media player content first caused a privileged chrome: url to load then the subsequent javascript: url could execute arbitrary code.”

The new release also fixes “remaining history syncing issues between rendering engines” and other bugs and crash issues, says Netscape.

The release notes and download for Netscape version 8.0.3.1 can be found here.

Netscape Critical Flaws Fixed with This Week’s Netscape 8.0.3.1 Release

 Follow Anne on Twitter

 Twitter Explained in Plain English

 Friend Anne on Facebook

Previous Article « Proof of Windows Legitimacy Becomes Mandatory with Release of Windows Genuine Advantage (WGA) 1.0
Read Next Article » 9 Out of 10 Teens Now Online, Eschew Email, Embrace Instant Messenger

Read more:

»  Severe Security Flaw in Netscape

»  Move Over Internet Explorer - Make Way for New Netscape with Anti-Phishing Features

»  Microsoft to Internet Explorer Users: “Hey You! Uninstall Netscape 8!”

»  Microsoft Windows Security Updates for October - 3 Critical!

For additional similar stories check out our archives on Security, Windows

NOTE: We never, ever, ever will recommend any product or service on this site that we have not regularly used ourselves and do not wholeheartedly believe in. That said, in some cases after being very pleased with a product or service, we may enter into a relationship with the provider of that product or service such that if someone purchases that product or service based on our recommendation, we may get a small payment. Such payments go towards the upkeep of the Internet Patrol.

 

No Comments »

No comments yet.

RSS feed for comments on this post.

Leave a comment

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!

If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.

Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


If you have not posted a comment here before, we apologize for having to ask you to enter the letters and numbers you see in the image above to validate your comment, but we are being attacked by thousands of comment form spams every day! You only need to do this once; once you have successfuly posted a comment here you will not be asked to do this again. Thank you for your understanding!

 
 This article first appeared on 7/26/2005
The Internet Patrol
Patrolling the Internet for You!