← Database

CVE-2007-4041

MEDIUM CVSS: 6.8 Published: 2007-07-27 Modified: 2026-06-16

Description

Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.

Affected Platforms

Mozilla FirefoxMicrosoft Internet ExplorerMicrosoft Windows XpMicrosoft Windows 2003 Server

Weakness Type

CWE-78

References