Lucene search

MitreCVE-2007-4041

HistoryJul 27, 2007 - 10:30 p.m.

CVE-2007-4041

2007-07-2722:30:00

CWE-78

mitre

web.nvd.nist.gov

cve

2007

4041

mozilla

firefox

injection

vulnerabilities

remote execution

arbitrary commands

null byte

shell metacharacters

mailto

nntp

news

snews

telnet uri

cve-2007-3670

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

High

EPSS

0.572

Percentile

97.7%

JSON

Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.

Affected configurations

Nvd

Node

microsoftwindows_2003_serversp2datacenter_edition

microsoftwindows_2003_serversp2enterprise_edition

microsoftwindows_2003_serversp2standard_edition

microsoftwindows_2003_serversp2web_edition

microsoftwindows_xpsp2home_edition

microsoftwindows_xpsp2professional_edition

AND

microsoftinternet_explorerMatch7

mozillafirefoxMatch2.0.0.5

mozillafirefoxMatch3.0alpha

VendorProductVersionCPE
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp2:datacenter_edition:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp2:enterprise_edition:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp2:standard_edition:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp2:web_edition:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp2:home_edition:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_edition:*:*:*:*:*
microsoftinternet_explorer7cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*
mozillafirefox2.0.0.5cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*
mozillafirefox3.0cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::sp2:datacenter_edition:::::
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::sp2:enterprise_edition:::::
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::sp2:standard_edition:::::
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::sp2:web_edition:::::
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::sp2:home_edition:::::
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::sp2:professional_edition:::::
microsoft	internet_explorer	7	cpe:2.3:a:microsoft:internet_explorer:7:::::::*
mozilla	firefox	2.0.0.5	cpe:2.3:a:mozilla:firefox:2.0.0.5:::::::*
mozilla	firefox	3.0	cpe:2.3:a:mozilla:firefox:3.0:alpha::::::