CVE-2007-3670
- State
- Published
- Severity
- Not scored
- Published
- Jul 10, 2007
- Updated
- Aug 7, 2024
- Reserved
- Jul 10, 2007
Description
Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1) FirefoxURL or (2) FirefoxHTML URI, which are inserted into the command line that is created when invoking firefox.exe. NOTE: it has been debated as to whether the issue is in Internet Explorer or Firefox. As of 20070711, it is CVE's opinion that IE appears to be failing to properly delimit the URL argument when invoking Firefox, and this issue could arise with other protocol handlers in IE as well. However, Mozilla has stated that it will address the issue with a "defense in depth" fix that will "prevent IE from sending Firefox malicious data."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ADV-2007-2473vdb-entry
- USN-503-1vendor-advisory
- 1018360vdb-entry
- 1018351vdb-entry
- HPSBUX02156vendor-advisory
- http://blog.mozilla.com/security/2007/07/10/security-issue-in-url-protocol-handling-on-windows/
- HPSBUX02153vendor-advisory
- MDKSA-2007:152vendor-advisory
- 25984third-party-advisory
- ie-firefoxurl-command-execution(35346)vdb-entry
- TA07-199Athird-party-advisory
- 28179third-party-advisory
- 24837vdb-entry
- http://msinfluentials.com/blogs/jesper/archive/2007/07/10/blocking-the-firefox-gt-ie-0-day.aspx
- 26216third-party-advisory
- http://www.virusbtn.com/news/virus_news/2007/07_11.xml
- http://www.theregister.co.uk/2007/07/11/ie_firefox_vuln/
- 20070719 Multiple Vendor Multiple Product URI Handler Input Validation Vulnerabilitythird-party-advisory
- ADV-2007-2565vdb-entry
- http://www.mozilla.org/security/announce/2007/mfsa2007-40.html
- 26149third-party-advisory
- ADV-2008-0082vdb-entry
- 38017vdb-entry
- http://www.mozilla.org/security/announce/2007/mfsa2007-23.html
- VU#358017third-party-advisory
- http://www.xs-sniper.com/sniperscope/IE-Pwns-Firefox.html
- ADV-2007-4272vdb-entry
- http://larholm.com/2007/07/10/internet-explorer-0day-exploit/
- SUSE-SA:2007:049vendor-advisory
- 20070710 Internet Explorer 0day exploitmailing-list
- http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html
- 26258third-party-advisory
- 28363third-party-advisory
- 20070710 Internet Explorer 0day exploitmailing-list
- 26271third-party-advisory
- 26204third-party-advisory
- 26572third-party-advisory
- 26096third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.