GCVE-110-CERTCC-2007-783400

Advisory Published

Vulnetix · Advisory published July 25, 2007

Mozilla Firefox does not filter input when sending certain URIs to registered protocol handlers. This may allow a remote, authenticated attacker to use Firefox as a vector for executing commands on a vulnerable system.

Download JSON Open in Console

Risk Scores

certcc-cam

impact15population15exploitation0widely_known20score_current25.515ease_of_exploitation14

certcc-vrda

d1_impact2d1_population4d1_direct_report0

Aliases

CVE-2007-3845

References

Mozilla Firefox URI filtering vulnerability

url

Mozilla Firefox URI filtering vulnerability

url

Mozilla Firefox URI filtering vulnerability

url

Mozilla Firefox URI filtering vulnerability

url

Mozilla Firefox URI filtering vulnerability

url

Mozilla Firefox URI filtering vulnerability

url

Mozilla Firefox URI filtering vulnerability

url

Mozilla Firefox URI filtering vulnerability

url

Mozilla Firefox URI filtering vulnerability

url

Mozilla Firefox URI filtering vulnerability

advisory

Mozilla Firefox URI filtering vulnerability

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON