CVE-2007-2292

Publicada el 26 abr 2007 · Actualizada el 07 ago 2024

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 13%

probabilidad de explotación

13%top 4% de las CVE

explotación observada

noninguna fuente lo reporta

CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.

Productos afectados

n/a · n/a

Referencias

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 https://bugzilla.mozilla.org/show_bug.cgi?id=378787 http://secunia.com/advisories/27276 http://secunia.com/advisories/27298 http://secunia.com/advisories/27311 http://secunia.com/advisories/27315 http://secunia.com/advisories/27325 http://secunia.com/advisories/27327 http://secunia.com/advisories/27335 http://secunia.com/advisories/27336 http://secunia.com/advisories/27356 http://secunia.com/advisories/27360