CVE-2007-4042
Summary
| CVE | CVE-2007-4042 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2007-07-27 22:30:00 UTC |
| Updated | 2021-07-23 15:04:00 UTC |
| Description | Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Microsoft | Ie | 7 | All | All | All |
| Application | Microsoft | Ie | 7 | All | All | All |
| Application | Microsoft | Internet Explorer | 7 | All | All | All |
| Operating System | Microsoft | Windows 2003 Server | All | sp2 | datacenter_edition | All |
| Operating System | Microsoft | Windows 2003 Server | All | sp2 | enterprise_edition | All |
| Operating System | Microsoft | Windows 2003 Server | All | sp2 | standard_edition | All |
| Operating System | Microsoft | Windows 2003 Server | All | sp2 | web_edition | All |
| Operating System | Microsoft | Windows 2003 Server | All | sp2 | datacenter_edition | All |
| Operating System | Microsoft | Windows 2003 Server | All | sp2 | enterprise_edition | All |
| Operating System | Microsoft | Windows 2003 Server | All | sp2 | standard_edition | All |
| Operating System | Microsoft | Windows 2003 Server | All | sp2 | web_edition | All |
| Operating System | Microsoft | Windows Xp | All | sp2 | home_edition | All |
| Operating System | Microsoft | Windows Xp | All | sp2 | professional_edition | All |
| Operating System | Microsoft | Windows Xp | All | sp2 | home_edition | All |
| Operating System | Microsoft | Windows Xp | All | sp2 | professional_edition | All |
| Application | Netscape | Navigator | 9.0 | All | All | All |
| Application | Netscape | Navigator | 9.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 46832 | OSVDB | osvdb.org | |
| Billy (BK) Rios » Remote Command Exec (FireFox 2.0.0.5 et al) | MISC | xs-sniper.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.