Red Hat Security Advisory RHSA-2001:046-03 - Netscape v4.77 has been released, fixing a problem with the handling of JavaScript in certain situations. Netscape did not escape GIF file comments in the image information page, allowing JavaScript commands embedded therein to be executed. These commands could access data such as the browser history.
5628f2c69aca6539e8ef52172f7db8f0811c99e6e034e02612ce4430c91dca21