CVE-2007-3845 Command injection in n/a
Remote attackers can execute arbitrary commands by tricking users into visiting malicious URIs that trigger file handler execution based on extensions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2007-3845?
CVE-2007-3845 is a critical command injection vulnerability in Mozilla Firefox, published on 8 Aug 2007. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant of CVE-2007-4041. NOTE: the vendor states that "it is still possible to launch a filetype handler based on extension rather than the registered protocol handler."
Which versions are affected by CVE-2007-3845?
It affects 3 products.
Products include Mozilla Firefox, Mozilla Seamonkey, Mozilla Thunderbird.
How do I fix CVE-2007-3845?
Upgrade to a fixed version.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2007-3845 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-3845 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Mozilla Firefox
Sources
Also known as GHSA-fq6c-fr6q-6pmq.