CVE-2007-3285

Published Jun 20, 2007 CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Description
Mozilla Firefox before 2.0.0.5, when run on Windows, allows remote attackers to bypass file type checks and possibly execute programs via a (1) file:/// or (2) resource: URI with a dangerous extension, followed by a NULL byte (%00) and a safer extension, which causes Firefox to treat the requested file differently than Windows would.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1337-1 New xulrunner packages fix several vulnerabilities
EUVD EUVD EUVD-2007-3275 Mozilla Firefox before 2.0.0.5, when run on Windows, allows remote attackers to bypass file type checks and possibly execute programs via a (1) file:/// or (2) resource: URI with a dangerous extension, followed by a NULL byte (%00) and a safer extension, which causes Firefox to treat the requested file differently than Windows would.
Ubuntu USN Ubuntu USN USN-490-1 Firefox vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.0155}

epss

{'score': 0.01765}

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 2:14 PM
Reserved
Jun 20, 2007, 12:00 AM
Status
Modified
Published
Jun 20, 2007, 7:30 PM
Modified
Jun 16, 2026, 10:41 PM