Critical: Moderately critical
Impact: Cross Site Scripting, System access
Where: From remote
Solution Status: Unpatched
Software: Netscape 7.x
Some vulnerabilities have been reported in Netscape, which potentially can be exploited by malicious people to conduct cross-site scripting attacks and compromise a user’s system.
For more information, see vulnerabilities #4 and #5 in:
SA14992
The vulnerabilities have been reported in version 7.2. Other versions may also be affected.
Solution: Disable JavaScript support and do not install untrusted search plugins.
Disable JavaScipt support? Hmmm, pretty hard to surf the net without it…
[Continue reading Secunia Advisory: SA14996]



