CVE-2007-4960: Argument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as used in I...

Security readout for executives and security teams

This CVE describes a way for a malicious web link to abuse the Second Life URL handler so the client may send login credentials and installation details to an attacker-controlled destination. The bundle does not identify a current patch, affected versions, or active exploitation. Exposure is most likely on endpoints with a vulnerable Second Life client or registered secondlife:// handler, especially where browsers can launch external protocol handlers from web content. The source bundle lists affected vendor/product fields as unavailable, so version-level exposure is not established here. Treat this as a targeted legacy-client exposure rather than an internet-wide emergency. Prioritize discovery and removal or restriction on managed endpoints, especially in environments where legacy browsers or old Second Life installations may remain. Mitigation focus: Check Linden Lab or client vendor guidance for supported fixes or deprecation advice.; Remove Second Life clients where there is no business need.; Disable or unregister the secondlife:// protocol handler on managed endpoints if unused..

Prepared

Jun 29, 2026, 03:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.