Netscape 4 DoS/Possibly exploitable buffer overflow.

I've never seen this posted/discussed anywhere before, so here it goes.

Netscape (version verified is 4.03) has a buffer overflow bug in their
bookmarks code. When somebody goes to a web page with a very long title
(6-8k) and then s/he bookmarks the page, netscape will start crashing at
loading bookmark.htm on startup. It's similar to the IE4 bug discovered
not long ago, but here you have to get the victim to bookmark the attackers
page.

Laslo Orto Computer Pages / Better.Net
Systems Administrator 253 Sheppard Ave. West
laslo_at_cpol.com / laslo_at_Better.net Toronto, Canada M2N 1N2
www.cpol.com / www.better.net Ph: +1 416 225 3030
                                        Fax: +1 416 225 6737
Received on Jan 12 1998