Vulnerability Database

290,020

Total vulnerabilities in the database

CVE-2007-4841

Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to execute arbitrary commands via a (1) mailto, (2) nntp, (3) news, or (4) snews URI with invalid "%" encoding, related to improper file type handling on Windows XP with Internet Explorer 7 installed, a variant of CVE-2007-3845.

  • Published: Sep 12, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-4841
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
mozilla / firefox - 2.0.0.8.x
mozilla / thunderbird - 2.0.0.8.x
mozilla / seamonkey - 1.1.5.x