CVE-2007-4042: Microsoft Internet Explorer

High severity, CVSS 7.5. EPSS: 10.3% chance of exploitation in the next 30 days.

Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.

Affected products

• Microsoft Internet Explorer: version 7 only
• Netscape Navigator: version 9.0 only

Published 2007-07-27. Last modified 2026-06-16.