CVE-2007-3845

Multiple Browsers - URI Handlers Command Injection

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2007-3845 has a selected CVSS score of 9.3; EIP currently links 1 catalogued exploit.

Description

Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant of CVE-2007-4041. NOTE: the vendor states that "it is still possible to launch a filetype handler based on extension rather than the registered protocol handler."

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBMultiple Browsers - URI Handlers Command InjectionExploitDB exploitby Billy RiosNot analyzed1 file
ExploitDB
PoC details

References

Showing 12 of 35