|
CVE Reference: CVE-2007-3954
|
|
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.
|
|
Original Page at CVE MITRE:
CVE-2007-3954
|
|
Description:
Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with SeaMonkey installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which are inserted into the command line that is created when invoking SeaMonkey.exe, a related issue to CVE-2007-3670.
|
|
CVE Status:
Candidate
|
|
References:
MISC
http://larholm.com/2007/07/23/seamonkey-suite-affected-by-url-vulnerability/
BID
25021
|
|
|
Return to the previous page.
|
