Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2007-3845 Details

Description

Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant of CVE-2007-4041. NOTE: the vendor states that "it is still possible to launch a filetype handler based on extension rather than the registered protocol handler."

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://bugzilla.mozilla.org/show_bug.cgi?id=389580	CVE
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742	CVE
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579	CVE
https://bugzilla.mozilla.org/show_bug.cgi?id=389106	CVE
http://secunia.com/advisories/26234	CVE
http://secunia.com/advisories/26258	CVE
http://secunia.com/advisories/26303	CVE
http://secunia.com/advisories/26309	CVE
http://secunia.com/advisories/26331	CVE
http://secunia.com/advisories/26335	CVE
http://secunia.com/advisories/26393	CVE
http://secunia.com/advisories/26572	CVE
http://secunia.com/advisories/27326	CVE
http://secunia.com/advisories/27414	CVE
http://secunia.com/advisories/28135	CVE
https://issues.rpath.com/browse/RPL-1600	CVE
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.010101	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1	CVE
http://www.debian.org/security/2007/dsa-1344	CVE
http://www.debian.org/security/2007/dsa-1345	CVE
http://www.debian.org/security/2007/dsa-1346	CVE
http://www.debian.org/security/2007/dsa-1391	CVE
http://www.mandriva.com/security/advisories?name=MDKSA-2007:152	CVE
http://www.mandriva.com/security/advisories?name=MDVSA-2007:047	CVE
http://www.mandriva.com/security/advisories?name=MDVSA-2008:047	CVE
http://www.mozilla.org/security/announce/2007/mfsa2007-27.html	CVE
http://www.securityfocus.com/archive/1/475265/100/200/threaded	CVE
http://www.securityfocus.com/archive/1/475450/30/5550/threaded	CVE
http://www.securityfocus.com/bid/25053	CVE
http://www.ubuntu.com/usn/usn-493-1	CVE
http://www.ubuntu.com/usn/usn-503-1	CVE
http://www.vupen.com/english/advisories/2007/4256	CVE
http://www.vupen.com/english/advisories/2008/0082	CVE
http://bugzilla.mozilla.org/show_bug.cgi?id=389580	[email protected]
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742	[email protected]
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579	[email protected]
https://bugzilla.mozilla.org/show_bug.cgi?id=389106	[email protected]
http://secunia.com/advisories/26234	[email protected]
http://secunia.com/advisories/26258	[email protected]
http://secunia.com/advisories/26303	[email protected]
http://secunia.com/advisories/26309	[email protected]
http://secunia.com/advisories/26331	[email protected]
http://secunia.com/advisories/26335	[email protected]
http://secunia.com/advisories/26393	[email protected]
http://secunia.com/advisories/26572	[email protected]
http://secunia.com/advisories/27326	[email protected]
http://secunia.com/advisories/27414	[email protected]
http://secunia.com/advisories/28135	[email protected]
https://issues.rpath.com/browse/RPL-1600	[email protected]
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.010101	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1	[email protected]
http://www.debian.org/security/2007/dsa-1344	[email protected]
http://www.debian.org/security/2007/dsa-1345	[email protected]
http://www.debian.org/security/2007/dsa-1346	[email protected]
http://www.debian.org/security/2007/dsa-1391	[email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2007:152	[email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2007:047	[email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2008:047	[email protected]
http://www.mozilla.org/security/announce/2007/mfsa2007-27.html	[email protected]
http://www.securityfocus.com/archive/1/475265/100/200/threaded	[email protected]
http://www.securityfocus.com/archive/1/475450/30/5550/threaded	[email protected]
http://www.securityfocus.com/bid/25053	[email protected]
http://www.ubuntu.com/usn/usn-493-1	[email protected]
http://www.ubuntu.com/usn/usn-503-1	[email protected]
http://www.vupen.com/english/advisories/2007/4256	[email protected]
http://www.vupen.com/english/advisories/2008/0082	[email protected]

see all 68 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
microsoft windows xp	All versions
CPE cpe:2.3:o:microsoft:windows_xp:::::::: Remediation No remediation found in references.
mozilla firefox	2.0.0.5
CPE cpe:2.3:a:mozilla:firefox:2.0.0.5:::::::* Remediation No remediation found in references.
mozilla seamonkey	1.1.3
CPE cpe:2.3:a:mozilla:seamonkey:1.1.3:::::::* Remediation No remediation found in references.
mozilla thunderbird	2.0.0.5
CPE cpe:2.3:a:mozilla:thunderbird:2.0.0.5:::::::* Remediation No remediation found in references.

Change History

8 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 23, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 7, 2023	CVE Modified	[email protected]
Feb 13, 2023	CVE Modified	[email protected]
Oct 15, 2018	CVE Modified	[email protected]
Aug 8, 2007	Initial Analysis	[email protected]

CVE-2007-3845 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO