Which of the following bash functions can exploit the shellshock vulnerability if the new bash process is triggered and the environment variables pass to it?

Group of answer choices

1. foo2='echo "malicious codes"; () { echo "Hello world"};'

2. foo1='() { echo "Hello world"; }; echo "malicious codes";'

3. foo3=() { echo "Hello world"; }; echo "malicious codes";

4. foo4=echo "malicious codes"; () { echo "Hello world"};