CVE-2002-2061

CVE-2002-2061 describes a heap-based buffer overflow vulnerability affecting Netscape 6.2.3 and Mozilla 1.0 and earlier. This flaw allows remote attackers to crash client browsers and potentially execute arbitrary code by enticing users to view a specially crafted PNG image with large width/height values and an 8-bit or 16-bit alpha channel. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity, enabling partial confidentiality, integrity, and availability impacts. Despite its age and severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.