Description
Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | iceape | 1.0.10~pre070720-0etch3+lenny1 | DTSA-52-1 |
| Debian 5.0 | iceweasel | 2.0.0.6-0etch1+lenny1 | DTSA-53-1 |
| Debian 5.0 | xulrunner | 1.8.0.13~pre070720-0etch3+lenny1 | DTSA-51-1 |
| Debian 4.0 | iceape | 1.0.10~pre070720-0etch3 | DSA-1346-1 |
| Debian 4.0 | iceweasel | 2.0.0.6-0etch1 | DSA-1344-1 |
| Debian 4.0 | xulrunner | 1.8.0.13~pre070720-0etch3 | DSA-1345-1 |
Advisories 6
- DTSA-53-1 iceweasel - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-51-1 xulrunner - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1345-1 xulrunner Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-52-1 iceape - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1344-1 iceweasel Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1346-1 iceape Debian Security (DSA / DLA) · Mar 9, 2026