The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing a \n (newline) character, which is not properly handled in a JavaScript "document.cookie =" expression, a different vulnerability than CVE-2011-2374.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-dom-inspectorUpgrade xulrunner-develUpgrade seamonkey-js-debuggerUpgrade firefoxUpgrade thunderbirdUpgrade seamonkey-develUpgrade seamonkey-mailUpgrade seamonkey-chatUpgrade xulrunnerUpgrade seamonkey | Dec 1, 2016 | Jun 30, 2011 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade www-client/icecat.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Jun 30, 2011 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade thunderbirdUpgrade xulrunner | Oct 16, 2024 | Jun 30, 2011 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 19, 2024 | Jun 30, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub