Is CVE-2007-3924 being actively exploited?

CVE-2007-3924 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2007-3924?

CVE-2007-3924 has a CVSS 2.0 base score of 9.3 (HIGH).

CVE-2007-3924

HIGH · CVSS 9.3EPSS 13.6%EU EUVD

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a -chrome argument to the navigatorurl URI, which are inserted into the command line that is created when invoking netscape.exe, a related issue to CVE-2007-3670. NOTE: there has been debate about whether the issue is in Internet Explorer or Netscape. As of 20070713, it is CVE's opinion that IE appears to not properly delimit the URL argument when invoking Netscape; this issue could arise with other protocol handlers in IE.

Key facts

CVSS score: 9.3 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS score: 13.6% (96th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2007-3908)
Published: July 21, 2007
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2007-3908 in the EU Vulnerability Database. Last updated in EUVD on September 17, 2024.

View on the EU Vulnerability Database

Affected products

microsoft / internet explorer
netscape / navigator

References

http://secunia.com/advisories/26082(Vendor Advisory)
http://sla.ckers.org/forum/read.php?3%2C13732%2C13739

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain