Problem Description Versions of netscape prior to 4.76 allow a client-side exploit through a buffer overflow in html code. A malicious website operator can cause arbitrary code to be executed by the user running the netscape client. The ports collections shipped with FreeBSD 3.5.1 and 4.1.1 are vulnerable to this problem since it was discovered after the release, but it was corrected prior to the release of FreeBSD 4.2. Impact Remote attackers can execute arbitrary code on the local system by convincing users to visit a malicious website. Upgrade your entire ports collection and rebuild the relevant netscape port.
Localized versions are also available in the respective language subdirectory.