Skip to content
OpenAdvisories
Critical · 9.8 CVE-2007-4039 EUVD-2007-4023GHSA-5qrv-2vjc-xwcq

Argument injection vulnerability involving Mozilla, when certain URIs are registered, allows remote attackers to conduct cross-browser scri…

Published Jul 27, 2007 · Updated Apr 3, 2025 · Assigned by mitre

Description

Argument injection vulnerability involving Mozilla, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670.

References