VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 8, 2007· Updated Jun 16, 2026

CVE-2007-3845

CVE-2007-3845

Description

Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant of CVE-2007-4041. NOTE: the vendor states that "it is still possible to launch a filetype handler based on extension rather than the registered protocol handler."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Mozilla Corporation/Firefox2 versions
    cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*
    • (no CPE)range: <2.0.0.6
  • Mozilla Corporation/Seamonkey2 versions
    cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*
    • (no CPE)range: <1.1.4
  • Mozilla Corporation/Thunderbird2 versions
    cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*
    • (no CPE)range: <1.5.0.13, <2.0.0.6

Patches

Vulnerability mechanics

References

34

News mentions

0

No linked articles in our index yet.