CVE-2007-3845
Mozilla Firefox <2.0.0.6, Thunderbird <1.5.0.13 & 2.x <2.0.0.6, Sea...
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-3845. PoCs published by Billy Rios.
AI-analyzed exploit summary This exploit leverages URI protocol handlers in multiple browsers to execute arbitrary commands via crafted URIs. It demonstrates command injection through handlers like 'mailto:', 'nntp:', and others to spawn processes like 'cmd.exe' or 'calc.exe'.
Description
Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant of CVE-2007-4041. NOTE: the vendor states that "it is still possible to launch a filetype handler based on extension rather than the registered protocol handler."
Exploits (1)
This exploit leverages URI protocol handlers in multiple browsers to execute arbitrary commands via crafted URIs. It demonstrates command injection through handlers like 'mailto:', 'nntp:', and others to spawn processes like 'cmd.exe' or 'calc.exe'.