CVE-2007-3954
Last modified
CVE-2007-3954 is a vulnerability of currently unknown severity. Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with SeaMonkey installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which are inserted into the command line that is created when invoking SeaMonkey.exe, a related issue to CVE-2007-3670.. EPSS estimates a 6.67% chance of exploitation in the next 30 days.
Description
Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with SeaMonkey installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which are inserted into the command line that is created when invoking SeaMonkey.exe, a related issue to CVE-2007-3670.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Internet Explorer | All versions |
| Mozilla | Seamonkey | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-3954?
How severe is CVE-2007-3954?
How do I fix CVE-2007-3954?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-3948connections.c in lighttpd before 1.4.16 might accept more co…
- CVE-2007-3949mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) c…
- CVE-2007-3950lighttpd 1.4.15, when run on 32 bit platforms, allows remote…
- CVE-2007-3951Multiple buffer overflows in Norman Antivirus 5.90 allow rem…
- CVE-2007-3952The OLE2 parsing in Norman Antivirus before 5.91.02 allows r…
- CVE-2007-3953The OLE2 parsing in Norman Antivirus before 5.91.02 allows r…
- CVE-2007-3955Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX con…
- CVE-2007-3956TeamSpeak WebServer 2.0 for Windows does not validate parame…
- CVE-2007-3957Buffer overflow in Nipun Jain xserver 0.1 alpha allows remot…
- CVE-2007-3958Microsoft Windows Explorer (explorer.exe) allows user-assist…
- CVE-2007-3959The IM Server (aka IMserve or IMserver) 2.0.5.30 and probabl…
- CVE-2007-3960Multiple unspecified vulnerabilities in IBM WebSphere Applic…
Are you affected by CVE-2007-3954?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST