CVE-2007-3845
Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey...
Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant of CVE-2007-4041. NOTE: the vendor states that "it is still possible to launch a filetype handler based on extension rather than the registered protocol handler."
Exploit likelihood
What each source reports
NVD Score used
Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant of CVE-2007-4041. NOTE: the vendor states that "it is still possible to launch a filetype handler based on extension rather than the registered protocol handler."
- Record
CVE-2007-3845- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant of CVE-2007-4041. NOTE: the vendor states that "it is still possible to launch a filetype handler based on extension rather than the registered protocol handler."
- Record
CVE-2007-3845- Updated
- 2026-11-02
EUVDEUVD-2007-3829 No score
Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant of CVE-2007-4041. NOTE: the vendor states that "it is still possible to launch a filetype handler based on extension rather than the registered protocol handler."
- Record
EUVD-2007-3829- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fq6c-fr6q-6pmq No score
Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey...
Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant of CVE-2007-4041. NOTE: the vendor states that "it is still possible to launch a filetype handler based on extension rather than the registered protocol handler."
- Record
GHSA-fq6c-fr6q-6pmq- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iceweaselDebian:4.0 From an advisory covering 3 CVEs |
before 2.0.0.6-0etch1, plus listed versions 2.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch12.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-2 |
2.0.0.6-0etch1 |
xulrunnerDebian:4.0 From an advisory covering 3 CVEs |
before 1.8.0.13~pre070720-0etch3, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch11.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch2 |
1.8.0.13~pre070720-0etch3 |
iceapeDebian:4.0 From an advisory covering 3 CVEs |
before 1.0.10~pre070720-0etch3, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.8-41.0.9-0etch1 |
1.0.10~pre070720-0etch3 |
icedoveDebian:4.0 From an advisory covering 6 CVEs |
before 1.5.0.13+1.5.0.14b.dfsg1-0etch1, plus listed versions 1.5.0.10.dfsg1-31.5.0.12.dfsg1-0etch11.5.0.12.dfsg1-0etch1+lenny1 |
1.5.0.13+1.5.0.14b.dfsg1-0etch1 |
xulrunnerDebian:5.0 From an advisory covering 17 CVEs |
before 1.8.0.13~pre070720-0etch3+lenny1 | 1.8.0.13~pre070720-0etch3+lenny1 |
iceapeDebian:5.0 From an advisory covering 3 CVEs |
before 1.0.10~pre070720-0etch3+lenny1 | 1.0.10~pre070720-0etch3+lenny1 |
iceweaselDebian:5.0 From an advisory covering 3 CVEs |
before 2.0.0.6-0etch1+lenny1 | 2.0.0.6-0etch1+lenny1 |
icedoveDebian:5.0 From an advisory covering 6 CVEs |
before 1.5.0.13+1.5.0.14b.dfsg1-0lenny1 | 1.5.0.13+1.5.0.14b.dfsg1-0lenny1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Multiple Browsers - URI Handlers Command Injection | 2007-07-25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, exploits, facts, published, references, title | Exploit-DB, GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3845 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published August 3, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.70%, the 93rd percentile. No source names a fixed version.
References
mozilla.org/security/announce/2007/mfsa2007-27.html
issues.rpath.com/browse/RPL-1600
ubuntu.com/usn/usn-503-1
mandriva.com/security/advisories?name=MDVSA-2008:047
secunia.com/advisories/27414
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579
Show 30 moreShow less
vupen.com/english/advisories/2007/4256
securityfocus.com/bid/25053
debian.org/security/2007/dsa-1345
bugzilla.mozilla.org/show_bug.cgi?id=389580
sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.010101
nvd.nist.gov/vuln/detail/CVE-2007-3845
github.com/advisories/GHSA-fq6c-fr6q-6pmq