199
Reference Description
https://www.cve.org/CVERecord?id=CVE-2006-1865
CVE-2006-2056 Argument injection vulnerability in Internet Explorer 6 for Windows XP SP2
allows user-assisted remote attackers to modify command line arguments
to an invoked mail client via " (double quote) characters in a mailto: scheme
handler, as demonstrated by launching Microsoft Outlook with an arbitrary
filename as an attachment. NOTE: it is not clear whether this issue is
implementation-specific or a problem in the Microsoft API.
https://www.cve.org/CVERecord?id=CVE-2006-2056
CVE-2006-2057 Argument injection vulnerability in Mozilla Firefox 1.0.6 allows user-assisted
remote attackers to modify command line arguments to an invoked mail client
via " (double quote) characters in a mailto: scheme handler, as demonstrated
by launching Microsoft Outlook with an arbitrary filename as an attachment.
NOTE: it is not clear whether this issue is implementation-specific or a problem
in the Microsoft API.
https://www.cve.org/CVERecord?id=CVE-2006-2057
CVE-2006-2058 Argument injection vulnerability in Avant Browser 10.1 Build 17 allows userassisted
remote attackers to modify command line arguments to an invoked
mail client via " (double quote) characters in a mailto: scheme handler, as
demonstrated by launching Microsoft Outlook with an arbitrary filename as an
attachment. NOTE: it is not clear whether this issue is implementation-specific
or a problem in the Microsoft API.
https://www.cve.org/CVERecord?id=CVE-2006-2058
CVE-2006-2312 Argument injection vulnerability in the URI handler in Skype 2.0.*.104 and
2.5.*.0 through 2.5.*.78 for Windows allows remote authorized attackers
to download arbitrary files via a URL that contains certain command-line
switches.
https://www.cve.org/CVERecord?id=CVE-2006-2312
CVE-2006-3015 Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote
attackers to upload or download arbitrary files via encoded spaces and doublequote
characters in a scp or sftp URI.
https://www.cve.org/CVERecord?id=CVE-2006-3015
CVE-2006-4692 Argument injection vulnerability in the Windows Object Packager
(packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003
SP1 and earlier allows remote user-assisted attackers to execute arbitrary
commands via a crafted file with a "/" (slash) character in the filename of the
Command Line property, followed by a valid file extension, which causes the
command before the slash to be executed, aka "Object Packager Dialogue
Spoofing Vulnerability."
https://www.cve.org/CVERecord?id=CVE-2006-4692
CVE-2006-6597 Argument injection vulnerability in HyperAccess 8.4 allows user-assisted
remote attackers to execute arbitrary vbscript and commands via the /r option
in a telnet:// URI, which is configured to use hawin32.exe.
https://www.cve.org/CVERecord?id=CVE-2006-6597
CVE-2007-0882 Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10
and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as
valid requests for the login program to skip authentication, which allows remote
attackers to log into certain accounts, as demonstrated by the bin account.
https://www.cve.org/CVERecord?id=CVE-2007-0882
CVE-2001-1246 Language interpreter's mail function accepts another argument that is
concatenated to a string used in a dangerous popen() call. Since there is no
neutralization of this argument, both OS Command Injection (CWE-78) and
Argument Injection (CWE-88) are possible.
https://www.cve.org/CVERecord?id=CVE-2001-1246
CWE Version 4.14
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CWE-88: Improper Neutralization of Argument
Delimiters in a Command ('Argument Injection') 200
Reference Description
CVE-2019-13475 Argument injection allows execution of arbitrary commands by injecting a "-
exec" option, which is executed by the command.
https://www.cve.org/CVERecord?id=CVE-2019-13475
CVE-2016-10033 Argument injection in mail-processing function allows writing unxpected files
and executing programs using tecnically-valid email addresses that insert "-o"
and "-X" switches.
https://www.cve.org/CVERecord?id=CVE-2016-10033
Affected Resources
• System Process
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 741 CERT C Secure Coding Standard (2008) Chapter 8 -
Characters and Strings (STR)
734 2344
MemberOf 744 CERT C Secure Coding Standard (2008) Chapter 11 -
Environment (ENV)
734 2348
MemberOf 810 OWASP Top Ten 2010 Category A1 - Injection 809 2356
MemberOf 875 CERT C++ Secure Coding Section 07 - Characters and
Strings (STR)
868 2376
MemberOf 878 CERT C++ Secure Coding Section 10 - Environment
(ENV)
868 2378
MemberOf 884 CWE Cross-section 884 2567
MemberOf 929 OWASP Top Ten 2013 Category A1 - Injection 928 2389
MemberOf 990 SFP Secondary Cluster: Tainted Input to Command 888 2413
MemberOf 1027 OWASP Top Ten 2017 Category A1 - Injection 1026 2435
MemberOf 1165 SEI CERT C Coding Standard - Guidelines 10.
Environment (ENV)
1154 2460
MemberOf 1347 OWASP Top Ten 2021 Category A03:2021 - Injection 1344 2490
MemberOf 1409 Comprehensive Categorization: Injection 1400 2535
Notes
Relationship
At one layer of abstraction, this can overlap other weaknesses that have whitespace problems,
e.g. injection of javascript into attributes of HTML tags.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Argument Injection or Modification
CERT C Secure Coding ENV03-C Sanitize the environment when invoking
external programs
CERT C Secure Coding ENV33-C Imprecise Do not call system()
CERT C Secure Coding STR02-C Sanitize data passed to complex
subsystems
WASC 30 Mail Command Injection
Related Attack Patterns
CAPEC-ID Attack Pattern Name
41 Using Meta-characters in E-mail Headers to Inject Malicious Payloads
CWE Version 4.14
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89: Improper Neutralization of Special
Elements used in an SQL Command ('SQL Injection')