Lucene search
PRIOn knowledge basePRION:CVE-2007-4038HistoryJul 27, 2007 - 10:30 p.m.
Cross site scripting
2007-07-2722:30:00
PRIOn knowledge base
www.prio-n.com
15
Argument injection vulnerability in Mozilla Firefox before 2.0.0.5, when running on systems with Thunderbird 1.5 installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which are inserted into the command line that is created when invoking Thunderbird.exe, a similar issue to CVE-2007-3670.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | le | 2.0.0.4 | |
| thunderbird | eq | 1.5 |
Related
ubuntucve
ubuntucve
cve
cve
redhatcve
redhatcve
cvelist
cvelist
nvd
nvd
cert
cert
Mozilla Firefox URL protocol handling vulnerability
2007-07-11 00:00:00
mozilla
mozilla
Remote code execution by launching Firefox from Internet Explorer — Mozilla
2007-07-17 00:00:00
Upgraded Thunderbird 1.5.0.13 missing fix for MFSA 2007-23 — Mozilla
2007-12-19 00:00:00
chrome
chrome
Stable and Beta Update: Incognito Mode Fix
2009-02-03 00:00:00
securityvulns
securityvulns
Microsoft Internet Explorer 0-day vulnerability
2007-07-19 00:00:00
iDefense Security Advisory 07.19.07: Multiple Vendor Multiple Product URI Handler Input Validation Vulnerability
2007-07-19 00:00:00
Mozilla Foundation Security Advisory 2007-23
2007-07-19 00:00:00
nessus
nessus
Google Chrome < 1.0.154.48 Cross-browser Command Execution
2009-02-16 00:00:00
openSUSE 10 Security Update : seamonkey (seamonkey-3986)
2007-10-17 00:00:00
prion
prion
Cross site scripting
2007-07-10 19:30:00
Cross site scripting
2007-07-27 22:30:00
Cross site scripting
2007-07-27 22:30:00
myhack58
myhack58
ubuntu
ubuntu
Thunderbird vulnerabilities
2007-08-25 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-503-1)
2009-03-23 00:00:00
Ubuntu Update for mozilla-thunderbird vulnerabilities USN-503-1
2009-03-23 00:00:00
Debian: Security Advisory (DSA-1338-1)
2008-01-17 00:00:00
packetstorm
packetstorm
EA Origin Remote Code Execution
2019-06-21 00:00:00
zdt
zdt
EA Origin < 10.5.38 - Remote Code Execution Vulnerability
2019-06-22 00:00:00
exploitpack
exploitpack
EA Origin 10.5.38 - Remote Code Execution
2019-06-21 00:00:00
osv
osv
iceweasel
2007-07-23 00:00:00
exploitdb
exploitdb
EA Origin < 10.5.38 - Remote Code Execution
2019-06-21 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,Seamonkey
2007-08-02 16:31:06
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
rosalinux
rosalinux
Advisory ROSA-SA-2024-2370
2024-03-12 08:35:15