CVE ID:	CVE-2007-3845
Description:	Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant of CVE-2007-4041. NOTE: the vendor states that "it is still possible to launch a filetype handler based on extension rather than the registered protocol handler."
Test IDs:	1.3.6.1.4.1.25623.1.0.58520   1.3.6.1.4.1.25623.1.0.58516   1.3.6.1.4.1.25623.1.0.58519   1.3.6.1.4.1.25623.1.0.58688
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3845 103177 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1 20070801 FLEA-2007-0039-1 firefox http://www.securityfocus.com/archive/1/475265/100/200/threaded 20070803 FLEA-2007-0040-1 thunderbird http://www.securityfocus.com/archive/1/475450/30/5550/threaded 201516 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 25053 http://www.securityfocus.com/bid/25053 26234 http://secunia.com/advisories/26234 26258 http://secunia.com/advisories/26258 26303 http://secunia.com/advisories/26303 26309 http://secunia.com/advisories/26309 26331 http://secunia.com/advisories/26331 26335 http://secunia.com/advisories/26335 26393 http://secunia.com/advisories/26393 26572 http://secunia.com/advisories/26572 27326 http://secunia.com/advisories/27326 27414 http://secunia.com/advisories/27414 28135 http://secunia.com/advisories/28135 ADV-2007-4256 http://www.vupen.com/english/advisories/2007/4256 ADV-2008-0082 http://www.vupen.com/english/advisories/2008/0082 DSA-1344 http://www.debian.org/security/2007/dsa-1344 DSA-1345 http://www.debian.org/security/2007/dsa-1345 DSA-1346 http://www.debian.org/security/2007/dsa-1346 DSA-1391 http://www.debian.org/security/2007/dsa-1391 HPSBUX02153 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 HPSBUX02156 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 MDKSA-2007:152 http://www.mandriva.com/security/advisories?name=MDKSA-2007:152 MDVSA-2007:047 http://www.mandriva.com/security/advisories?name=MDVSA-2007:047 MDVSA-2008:047 http://www.mandriva.com/security/advisories?name=MDVSA-2008:047 SSA:2007-213-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.010101 SSRT061181 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 SSRT061236 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 USN-493-1 http://www.ubuntu.com/usn/usn-493-1 USN-503-1 http://www.ubuntu.com/usn/usn-503-1 http://bugzilla.mozilla.org/show_bug.cgi?id=389580 http://bugzilla.mozilla.org/show_bug.cgi?id=389580 http://www.mozilla.org/security/announce/2007/mfsa2007-27.html http://www.mozilla.org/security/announce/2007/mfsa2007-27.html https://bugzilla.mozilla.org/show_bug.cgi?id=389106 https://bugzilla.mozilla.org/show_bug.cgi?id=389106 https://issues.rpath.com/browse/RPL-1600 https://issues.rpath.com/browse/RPL-1600