Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2007-3670
Modified
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-10 Jul, 2007 | 19:30
Updated At-23 Apr, 2026 | 00:35

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1) FirefoxURL or (2) FirefoxHTML URI, which are inserted into the command line that is created when invoking firefox.exe. NOTE: it has been debated as to whether the issue is in Internet Explorer or Firefox. As of 20070711, it is CVE's opinion that IE appears to be failing to properly delimit the URL argument when invoking Firefox, and this issue could arise with other protocol handlers in IE as well. However, Mozilla has stated that it will address the issue with a "defense in depth" fix that will "prevent IE from sending Firefox malicious data."

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.04.3MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Type: Primary
Version: 2.0
Base score: 4.3
Base severity: MEDIUM
Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N
CPE Matches
Microsoft Corporation
microsoft
>>internet_explorer>>6
cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>internet_explorer>>6
cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>internet_explorer>>7.0
cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>internet_explorer>>7.0
cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>internet_explorer>>7.0
cpe:2.3:a:microsoft:internet_explorer:7.0:beta2:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>internet_explorer>>7.0
cpe:2.3:a:microsoft:internet_explorer:7.0:beta3:*:*:*:*:*:*
Mozilla Corporation
mozilla
>>firefox>>*
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-79Primarynvd@nist.gov
CWE ID: CWE-79
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Successful exploit requires that Mozilla Firefox is installed.

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txtcve@mitre.org
N/A
http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0160.htmlcve@mitre.org
N/A
http://blog.mozilla.com/security/2007/07/10/security-issue-in-url-protocol-handling-on-windows/cve@mitre.org
N/A
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742cve@mitre.org
N/A
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579cve@mitre.org
N/A
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=565cve@mitre.org
N/A
http://larholm.com/2007/07/10/internet-explorer-0day-exploit/cve@mitre.org
N/A
http://msinfluentials.com/blogs/jesper/archive/2007/07/10/blocking-the-firefox-gt-ie-0-day.aspxcve@mitre.org
N/A
http://osvdb.org/38017cve@mitre.org
N/A
http://secunia.com/advisories/25984cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/26096cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/26149cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/26204cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/26216cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/26258cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/26271cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/26572cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/28179cve@mitre.org
N/A
http://secunia.com/advisories/28363cve@mitre.org
N/A
http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.htmlcve@mitre.org
N/A
http://www.kb.cert.org/vuls/id/358017cve@mitre.org
US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2007:152cve@mitre.org
N/A
http://www.mozilla.org/security/announce/2007/mfsa2007-23.htmlcve@mitre.org
N/A
http://www.mozilla.org/security/announce/2007/mfsa2007-40.htmlcve@mitre.org
N/A
http://www.novell.com/linux/security/advisories/2007_49_mozilla.htmlcve@mitre.org
N/A
http://www.securityfocus.com/archive/1/473276/100/0/threadedcve@mitre.org
N/A
http://www.securityfocus.com/bid/24837cve@mitre.org
N/A
http://www.securitytracker.com/id?1018351cve@mitre.org
N/A
http://www.securitytracker.com/id?1018360cve@mitre.org
N/A
http://www.theregister.co.uk/2007/07/11/ie_firefox_vuln/cve@mitre.org
N/A
http://www.ubuntu.com/usn/usn-503-1cve@mitre.org
N/A
http://www.us-cert.gov/cas/techalerts/TA07-199A.htmlcve@mitre.org
US Government Resource
http://www.virusbtn.com/news/virus_news/2007/07_11.xmlcve@mitre.org
N/A
http://www.vupen.com/english/advisories/2007/2473cve@mitre.org
N/A
http://www.vupen.com/english/advisories/2007/2565cve@mitre.org
N/A
http://www.vupen.com/english/advisories/2007/4272cve@mitre.org
N/A
http://www.vupen.com/english/advisories/2008/0082cve@mitre.org
N/A
http://www.xs-sniper.com/sniperscope/IE-Pwns-Firefox.htmlcve@mitre.org
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/35346cve@mitre.org
N/A
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txtaf854a3a-2127-422b-91ae-364da2661108
N/A
http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0160.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://blog.mozilla.com/security/2007/07/10/security-issue-in-url-protocol-handling-on-windows/af854a3a-2127-422b-91ae-364da2661108
N/A
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742af854a3a-2127-422b-91ae-364da2661108
N/A
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579af854a3a-2127-422b-91ae-364da2661108
N/A
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=565af854a3a-2127-422b-91ae-364da2661108
N/A
http://larholm.com/2007/07/10/internet-explorer-0day-exploit/af854a3a-2127-422b-91ae-364da2661108
N/A
http://msinfluentials.com/blogs/jesper/archive/2007/07/10/blocking-the-firefox-gt-ie-0-day.aspxaf854a3a-2127-422b-91ae-364da2661108
N/A
http://osvdb.org/38017af854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/25984af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/26096af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/26149af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/26204af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/26216af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/26258af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/26271af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/26572af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/28179af854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/28363af854a3a-2127-422b-91ae-364da2661108
N/A
http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.kb.cert.org/vuls/id/358017af854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2007:152af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.mozilla.org/security/announce/2007/mfsa2007-23.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.mozilla.org/security/announce/2007/mfsa2007-40.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.novell.com/linux/security/advisories/2007_49_mozilla.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/archive/1/473276/100/0/threadedaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/bid/24837af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securitytracker.com/id?1018351af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securitytracker.com/id?1018360af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.theregister.co.uk/2007/07/11/ie_firefox_vuln/af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.ubuntu.com/usn/usn-503-1af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.us-cert.gov/cas/techalerts/TA07-199A.htmlaf854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.virusbtn.com/news/virus_news/2007/07_11.xmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.vupen.com/english/advisories/2007/2473af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.vupen.com/english/advisories/2007/2565af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.vupen.com/english/advisories/2007/4272af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.vupen.com/english/advisories/2008/0082af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.xs-sniper.com/sniperscope/IE-Pwns-Firefox.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/35346af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0160.html
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://blog.mozilla.com/security/2007/07/10/security-issue-in-url-protocol-handling-on-windows/
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=565
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://larholm.com/2007/07/10/internet-explorer-0day-exploit/
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://msinfluentials.com/blogs/jesper/archive/2007/07/10/blocking-the-firefox-gt-ie-0-day.aspx
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://osvdb.org/38017
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/25984
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/26096
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/26149
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/26204
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/26216
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/26258
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/26271
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/26572
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/28179
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/28363
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.kb.cert.org/vuls/id/358017
Source: cve@mitre.org
Resource:
US Government Resource
Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2007:152
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.mozilla.org/security/announce/2007/mfsa2007-23.html
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.mozilla.org/security/announce/2007/mfsa2007-40.html
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.novell.com/linux/security/advisories/2007_49_mozilla.html
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/473276/100/0/threaded
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/24837
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securitytracker.com/id?1018351
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securitytracker.com/id?1018360
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.theregister.co.uk/2007/07/11/ie_firefox_vuln/
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.ubuntu.com/usn/usn-503-1
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.us-cert.gov/cas/techalerts/TA07-199A.html
Source: cve@mitre.org
Resource:
US Government Resource
Hyperlink: http://www.virusbtn.com/news/virus_news/2007/07_11.xml
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2007/2473
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2007/2565
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2007/4272
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2008/0082
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.xs-sniper.com/sniperscope/IE-Pwns-Firefox.html
Source: cve@mitre.org
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/35346
Source: cve@mitre.org
Resource: N/A
Hyperlink: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0160.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://blog.mozilla.com/security/2007/07/10/security-issue-in-url-protocol-handling-on-windows/
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=565
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://larholm.com/2007/07/10/internet-explorer-0day-exploit/
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://msinfluentials.com/blogs/jesper/archive/2007/07/10/blocking-the-firefox-gt-ie-0-day.aspx
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://osvdb.org/38017
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://secunia.com/advisories/25984
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/26096
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/26149
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/26204
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/26216
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/26258
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/26271
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/26572
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/28179
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://secunia.com/advisories/28363
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.kb.cert.org/vuls/id/358017
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
US Government Resource
Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2007:152
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.mozilla.org/security/announce/2007/mfsa2007-23.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.mozilla.org/security/announce/2007/mfsa2007-40.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.novell.com/linux/security/advisories/2007_49_mozilla.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/473276/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/24837
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securitytracker.com/id?1018351
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securitytracker.com/id?1018360
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.theregister.co.uk/2007/07/11/ie_firefox_vuln/
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.ubuntu.com/usn/usn-503-1
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.us-cert.gov/cas/techalerts/TA07-199A.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
US Government Resource
Hyperlink: http://www.virusbtn.com/news/virus_news/2007/07_11.xml
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2007/2473
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2007/2565
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2007/4272
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2008/0082
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.xs-sniper.com/sniperscope/IE-Pwns-Firefox.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/35346
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Change History
0Changes found
Details not found