Cross-browser Scripting Vulnerability in Microsoft Internet Explorer Affecting Firefox
CVE-2007-3670
Currently unrated
What is CVE-2007-3670?
An argument injection vulnerability exists in Microsoft Internet Explorer that can be exploited when running Firefox on the same system and with certain URIs registered. This flaw enables remote attackers to perform cross-browser scripting attacks, allowing the execution of arbitrary commands via maliciously crafted FirefoxURL or FirefoxHTML URIs. The underlying issue stems from Internet Explorer's improper handling of URL arguments during the invocation of Firefox, raising questions about protocol handler validation. Mozilla has committed to implementing a defense-in-depth solution to mitigate this risk.