CVE-2007-4038
Last modified
CVE-2007-4038 is a vulnerability of currently unknown severity. Argument injection vulnerability in Mozilla Firefox before 2.0.0.5, when running on systems with Thunderbird 1.5 installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which are inserted into the command line that is created when invoking Thunderbird.exe, a similar issue to CVE-2007-3670.. EPSS estimates a 1.11% chance of exploitation in the next 30 days.
Description
Argument injection vulnerability in Mozilla Firefox before 2.0.0.5, when running on systems with Thunderbird 1.5 installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which are inserted into the command line that is created when invoking Thunderbird.exe, a similar issue to CVE-2007-3670.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | <= 2.0.0.4 |
| Mozilla | Thunderbird | 1.5 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-4038?
How severe is CVE-2007-4038?
How do I fix CVE-2007-4038?
Are you affected by CVE-2007-4038?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST