Approved changes feed: RSS · Atom

cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*

part: a version: 7.1 update: *

VendorNetscape (2c519990-8f9a-5ac3-8d7c-5897cb1e036f)
ProductNavigator (efb10eff-54e8-5e07-9356-fc90d0b61b28)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4134 vulnerable 2026-06-08 04:48:43.030452 Details available
Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox. Also, it has been independently reported that Netscape 8.1 does not have this issue.
Published: 2005-12-09T15:00:00.000Z
Updated: 2024-08-07T23:31:49.153Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1753 vulnerable 2026-06-08 04:48:07.457748 Details available
The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs.
Published: 2005-02-26T05:00:00.000Z
Updated: 2024-08-08T01:00:37.238Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1160 vulnerable 2026-06-08 04:47:53.149731 Details available
Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
Published: 2004-12-10T05:00:00.000Z
Updated: 2024-08-08T00:39:01.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0905 vulnerable 2026-06-08 04:47:51.850924 Details available
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain.
Published: 2004-09-24T04:00:00.000Z
Updated: 2024-08-08T00:31:47.854Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0904 vulnerable 2026-06-08 04:47:51.843635 Details available
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.
Published: 2004-09-24T04:00:00.000Z
Updated: 2024-08-08T00:31:47.831Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0722 vulnerable 2026-06-08 04:47:51.008514 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0718 vulnerable 2026-06-08 04:47:51.003540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0528 vulnerable 2026-06-08 04:47:50.123202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.