NVD

Id
56172  
Name
CVE-2007-4041  
Description
Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-07-27  
Modified Date
2008-09-05  
Seq
2007-4041  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286146 56172 CVE-2007-4041 VU#783400  View
286147 56172 CVE-2007-4041 25053  View
286148 56172 CVE-2007-4041 http://xs-sniper.com/blog/2007/07/24/remote-command-execution-in-firefox-2005/  View
286149 56172 CVE-2007-4041 http://xs-sniper.com/blog/remote-command-exec-firefox-2005/  View
286150 56172 CVE-2007-4041 https://bugzilla.mozilla.org/show_bug.cgi?id=389106  View
286151 56172 CVE-2007-4041 https://bugzilla.mozilla.org/show_bug.cgi?id=389580  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52396 JVNDB-2007-001088 Mozilla 製品における複数の引数インジェクション攻撃が可能となる脆弱性 Mozilla 製品には URI に含まれる null バイト (%00) および mailto, nntp, news, snews, telnet のシェルメタ文字の処理に不備が存在するために、複数の引数インジェクション攻撃が可能となる脆弱性が存在します。 CVE-2007-4041 27396 CVE-2007-4041 56172 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001088.html 2007-07-25 2008-01-24 View