CVE-2005-2968: Mozilla Firefox
High severity, CVSS 7.5. EPSS: 10.7% chance of exploitation in the next 30 days.
Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash.
Affected products
Published 2005-09-20. Last modified 2026-06-16.