high7.5
CVE-2007-4042
Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metach…
Impact
Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Version 7 |
| Netscape | Navigator | Version 9.0 |