CVE-2007-4042: High severity Microsoft Windows 2003 Server vulnerability
Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4042?
CVE-2007-4042 is categorized as a critical vulnerability due to its potential to allow remote command execution.
How do I fix CVE-2007-4042?
To mitigate CVE-2007-4042, users are advised to upgrade to the latest version of Netscape Navigator or consider switching to a different web browser.
What software is affected by CVE-2007-4042?
CVE-2007-4042 specifically affects Netscape Navigator version 9.0.
Can CVE-2007-4042 be exploited remotely?
Yes, CVE-2007-4042 can be exploited remotely through crafted mailto, nntp, news, snews, or telnet URIs.
Are there any specific components vulnerable in CVE-2007-4042?
The vulnerability in CVE-2007-4042 involves argument injection through null bytes and shell metacharacters.