CVE-2005-2968
Fixed in a distro release EPSS 11%
Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash.
Products: mozilla firefox, mozilla
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | mozilla-thunderbird | 1.0.2-2.sarge1.0.7 |
| Red Hat Enterprise Linux 4 | firefox | 0:1.0.7-1.4.1 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:1.0.7-1.4.1 |
| Red Hat Enterprise Linux 4 | thunderbird | 0:1.0.7-1.4.1 |
| Red Hat Enterprise Linux 4 | thunderbird-debuginfo | 0:1.0.7-1.4.1 |