CVE-2007-4041

Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.

Published: Jul 28, 2007
Updated: Apr 13, 2023
CVE: CVE-2007-4041
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

CWE-78

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
microsoft / internet_explorer	7	7.x
mozilla / firefox	2.0.0.5	2.0.0.5.x
mozilla / firefox	3.0-alpha	3.0-alpha.x

http://www.kb.cert.org/vuls/id/783400
http://www.securityfocus.com/bid/25053
http://xs-sniper.com/blog/2007/07/24/remote-command-execution-in-firefox-2005/
http://xs-sniper.com/blog/remote-command-exec-firefox-2005/
https://bugzilla.mozilla.org/show_bug.cgi?id=389106
https://bugzilla.mozilla.org/show_bug.cgi?id=389580

Vulnerability Database

290,301

CVE-2007-4041