Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash.
Software | From | Fixed in |
---|---|---|
mozilla / mozilla | 1.7.10 | 1.7.10.x |
mozilla / firefox | 1.0.6 | 1.0.6.x |