CVE-2007-3659: Freewrl

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Buffer overflow in the doBrowserAction function in FreeWRL 1.19.3 allows local users to execute arbitrary code via a crafted BROWSER environment variable. NOTE: it is not clear whether this issue crosses privilege boundaries.

Affected products

• Freewrl Freewrl: version 1.19.3 only

Published 2007-07-10. Last modified 2026-06-16.