CVE-2007-3285

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-06-20 · updated 2026-06-16
Weakness: CWE-264

Description

Mozilla Firefox before 2.0.0.5, when run on Windows, allows remote attackers to bypass file type checks and possibly execute programs via a (1) file:/// or (2) resource: URI with a dangerous extension, followed by a NULL byte (%00) and a safer extension, which causes Firefox to treat the requested file differently than Windows would.

Affected products

Mozilla Firefox: through 2.0.0.4; 0.8, 0.9, 0.9.1, 0.9.2, 0.9.3, 0.10 (+37)

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
http://osvdb.org/38032
http://secunia.com/advisories/26072
http://secunia.com/advisories/26149
http://secunia.com/advisories/26204
http://secunia.com/advisories/26216
http://secunia.com/advisories/26258
http://secunia.com/advisories/26271
http://secunia.com/advisories/28135
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1

Get alerted when CVE-2007-3285 or the next vulnerability affects your stack