← Database

CVE-2007-4042

HIGH CVSS: 7.5 Published: 2007-07-27 Modified: 2026-06-16

Description

Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.

Affected Platforms

Microsoft Internet ExplorerMicrosoft Windows XpMicrosoft Windows 2003 ServerNetscape Navigator

Weakness Type

NVD-CWE-Other

References