RE: Netscape 8 inherits firefox, explorer vulnerabilities

["Benjamin Tomhave" <list-procurare () secureconsulting net>]

The answer to your first question is 'yes' - it does suffer from the
vulnerabilities of the underlying browser engine (firefox or IE).

In terms of patching, a new version was released within the past week that
the browser should have detected and prompted you to download and install.
This new version addresses the firefox engine and possibly some of the
non-engine components, since the IE components would get updated by MS as
part of their normal patch cycle.

---
Benjamin Tomhave, CISSP, IAM, IEM
falcon () secureconsulting net
http://falcon.secureconsulting.net/
http://www.linkedin.com/pub/0/622/964

"We must scrupulously guard the civil rights and civil liberties of all
citizens, whatever their background. We must remember that any oppression,
any injustice, any hatred is a wedge designed to attack our civilization."
-President Franklin Delano Roosevelt
 

> -----Original Message-----
> From: listbounce () securityfocus com 
> [mailto:listbounce () securityfocus com] On Behalf Of Emanuel Marufo
> Sent: Tuesday, October 03, 2006 3:33 PM
> To: webappsec () securityfocus com
> Subject: Netscape 8 inherits firefox, explorer vulnerabilities
>
> Hello everybody, this is my first post and i hope not the last.
>
> I work about 6 months with Netscape browser version 8, and it 
> have new capabilities, how firefox and explorer render(this 
> is great), and my question is, Netscape inherits firefox, 
> explorer vulnerabilities it is?, and do i need patch it ?, 
> pls, somebody explain me.
>
> --------------------------------------------------------------
> -----------
> Sponsored by: Watchfire
>
> Watchfire has new programs available for pen testers and 
> consultants to use AppScan in client engagements. AppScan is 
> the leading Web application assessment tool. Want to see it 
> for yourself? Take a look today!
>
> https://www.watchfire.com/securearea/appscancamp.aspx?id=70150
> 0000008YSz
> --------------------------------------------------------------
> ------------


-------------------------------------------------------------------------
Sponsored by: Watchfire

Watchfire has new programs available for pen testers and consultants to 
use AppScan in client engagements. AppScan is the leading Web application 
assessment tool. Want to see it for yourself? Take a look today!

https://www.watchfire.com/securearea/appscancamp.aspx?id=701500000008YSz
--------------------------------------------------------------------------