CVE-2007-4039

Publication date 27 July 2007

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

Argument injection vulnerability involving Mozilla, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670.

Status

Package Ubuntu Release Status
mozilla-thunderbird 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected