NVD

Id
55438  
Name
CVE-2007-3285  
Description
Mozilla Firefox before 2.0.0.5, when run on Windows, allows remote attackers to bypass file type checks and possibly execute programs via a (1) file:/// or (2) resource: URI with a dangerous extension, followed by a NULL byte (%00) and a safer extension, which causes Firefox to treat the requested file differently than Windows would.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-06-20  
Modified Date
2011-03-07  
Seq
2007-3285  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
281715 55438 CVE-2007-3285 ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt  View
281716 55438 CVE-2007-3285 HPSBUX02153  View
281717 55438 CVE-2007-3285 103177  View
281718 55438 CVE-2007-3285 201516  View
281719 55438 CVE-2007-3285 http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html  View
281720 55438 CVE-2007-3285 http://www.0x000000.com/?i=333  View
281721 55438 CVE-2007-3285 MDKSA-2007:152  View
281722 55438 CVE-2007-3285 http://www.mozilla.org/security/announce/2007/mfsa2007-22.html  View
281723 55438 CVE-2007-3285 SUSE-SA:2007:049  View
281724 55438 CVE-2007-3285 24447  View
281725 55438 CVE-2007-3285 1018413  View
281726 55438 CVE-2007-3285 USN-490-1  View
281727 55438 CVE-2007-3285 ADV-2007-4256  View
281728 55438 CVE-2007-3285 https://bugzilla.mozilla.org/show_bug.cgi?id=383478  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51881 JVNDB-2007-000544 Mozilla Firefox における URI 解釈の不備の問題 Mozilla Firefox には、file:/// URI や resource: の URI の取り扱いに不備があり、ファイル名に "%00" などの NULL 文字が含まれていた場合、ファイル名を誤って解釈してしまう問題があります。 CVE-2007-3285 26640 CVE-2007-3285 55438 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000544.html 2007-06-20 2008-01-11 View