CVE-2004-0648 Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the shell: protocol.
HighCVSS 10.0
EPSS 5.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the shell: protocol.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 0.9.2 | No fix listed |
| mozilla | <= 1.7.1 | No fix listed |
| mozilla Thunderbird | <= 0.7.2 | No fix listed |
References
- 20040707 shell:windows command question mailing-list
- 20040708 Mozilla Security Advisory 2004-07-08 mailing-list
- 12027 third-party-advisory
- O-175 government-resource third-party-advisory
- VU#927014 third-party-advisory us-government-resource
- www.mozilla.org
- www.mozilla.org
- mozilla-shell-program-execution(16655) vdb-entry