CVE-2007-3924 Command injection in n/a

Critical 9.3 Published 21 Jul 2007 Updated 17 Sep 2024

Remote attackers can execute arbitrary commands via argument injection in Internet Explorer when invoking Netscape, requiring specific system configurations.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2007-3924?

CVE-2007-3924 is a critical command injection vulnerability in Microsoft Internet Explorer, published on 21 Jul 2007. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a -chrome argument to the navigatorurl URI, which are inserted into the command line that is created when invoking netscape.exe, a related issue to CVE-2007-3670. NOTE: there has been debate about whether the issue is in Internet Explorer or Netscape. As of 20070713, it is CVE's opinion that IE appears to not properly delimit the URL argument when invoking Netscape; this issue could arise with other protocol handlers in IE.

Which versions are affected by CVE-2007-3924?

It affects 2 products.

Products include Microsoft Internet Explorer, Netscape Navigator.

How do I fix CVE-2007-3924?

No fix has been published for CVE-2007-3924 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2007-3924 being exploited?

There is no known exploitation of CVE-2007-3924 in the wild and no public exploit code.

All Microsoft Internet Explorer vulnerabilities

Sources

Also known as GHSA-mx2j-qfcf-xcrp.