[9924] in bugtraq
Netscape upgrade
daemon@ATHENA.MIT.EDU (Keith Young)
Mon Mar 15 22:40:49 1999
Date: Mon, 15 Mar 1999 17:03:26 -0500
Reply-To: youngk@TTC.COM
From: Keith Young <youngk@TTC.COM>
To: BUGTRAQ@NETSPACE.ORG
FYI...
Netscape has released version 4.51 of Communicator. It seems to fix the
window spoofing bug ( http://www.geek-girl.com/bugtraq/1999_1/0747.html ),
along with the javascript bugs that can be used to read local files from
your hard drive. I verifed this by trying the exploits at
http://www.whitehats.com/guninski/netscape.html
From their release notes page (
http://home.netscape.com/eng/mozilla/4.5/relnotes/windows-4.51.html )
"Fixes to improve security; in particular, the frame-spoofing
vulnerability problem (
http://home.netscape.com/products/security/resources/bugs/framespoofing.htm
l )has been fixed"
You can download version 4.51 at:
http://www.netscape.com/download/
--Keith Young
-youngk@ttc.com