Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto (2) nntp (3) news (4) snews or (5) telnet URI a similar issue to CVE-2007-3670.