GHSA-QWP7-HH47-5G3H

Vulnerability from github – Published: 2022-05-03 03:18 – Updated: 2022-05-03 03:18
VLAI?
Details

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1) FirefoxURL or (2) FirefoxHTML URI, which are inserted into the command line that is created when invoking firefox.exe. NOTE: it has been debated as to whether the issue is in Internet Explorer or Firefox. As of 20070711, it is CVE's opinion that IE appears to be failing to properly delimit the URL argument when invoking Firefox, and this issue could arise with other protocol handlers in IE as well. However, Mozilla has stated that it will address the issue with a "defense in depth" fix that will "prevent IE from sending Firefox malicious data."

Show details on source website
To clipboard 

{
  "affected": [],
  "aliases": [
    "CVE-2007-3670"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-79"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-07-10T19:30:00Z",
    "severity": "MODERATE"
  },
  "details": "Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1) FirefoxURL or (2) FirefoxHTML URI, which are inserted into the command line that is created when invoking firefox.exe.  NOTE: it has been debated as to whether the issue is in Internet Explorer or Firefox. As of 20070711, it is CVE\u0027s opinion that IE appears to be failing to properly delimit the URL argument when invoking Firefox, and this issue could arise with other protocol handlers in IE as well. However, Mozilla has stated that it will address the issue with a \"defense in depth\" fix that will \"prevent IE from sending Firefox malicious data.\"",
  "id": "GHSA-qwp7-hh47-5g3h",
  "modified": "2022-05-03T03:18:18Z",
  "published": "2022-05-03T03:18:18Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3670"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35346"
    },
    {
      "type": "WEB",
      "url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0160.html"
    },
    {
      "type": "WEB",
      "url": "http://blog.mozilla.com/security/2007/07/10/security-issue-in-url-protocol-handling-on-windows"
    },
    {
      "type": "WEB",
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742"
    },
    {
      "type": "WEB",
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579"
    },
    {
      "type": "WEB",
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=565"
    },
    {
      "type": "WEB",
      "url": "http://larholm.com/2007/07/10/internet-explorer-0day-exploit"
    },
    {
      "type": "WEB",
      "url": "http://msinfluentials.com/blogs/jesper/archive/2007/07/10/blocking-the-firefox-gt-ie-0-day.aspx"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/38017"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25984"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26096"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26149"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26204"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26216"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26258"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26271"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26572"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/28179"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/28363"
    },
    {
      "type": "WEB",
      "url": "http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/358017"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:152"
    },
    {
      "type": "WEB",
      "url": "http://www.mozilla.org/security/announce/2007/mfsa2007-23.html"
    },
    {
      "type": "WEB",
      "url": "http://www.mozilla.org/security/announce/2007/mfsa2007-40.html"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2007_49_mozilla.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/473276/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/24837"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1018351"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1018360"
    },
    {
      "type": "WEB",
      "url": "http://www.theregister.co.uk/2007/07/11/ie_firefox_vuln"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/usn-503-1"
    },
    {
      "type": "WEB",
      "url": "http://www.us-cert.gov/cas/techalerts/TA07-199A.html"
    },
    {
      "type": "WEB",
      "url": "http://www.virusbtn.com/news/virus_news/2007/07_11.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/2473"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/2565"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/4272"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2008/0082"
    },
    {
      "type": "WEB",
      "url": "http://www.xs-sniper.com/sniperscope/IE-Pwns-Firefox.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.