Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing a \n (newline) character, which is not properly handled in a JavaScript "document.cookie =" expression, a different vulnerability than CVE-2011-2374.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox和Thunderbird CRLF注入漏洞
Vulnerability Description
Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。Thunderbird是美国Mozilla基金会开发的从Mozilla Application Suite独立出来的电子邮件客户端软件，支持IMAP、POP邮件协议以及HTML邮件格式。 Mozilla Firefox 3.6.18之前版本和4.x至4.0.1版本，Thunderbird 3.1.11之前版本的netwerk/cookie/nsCookieService.cpp中的nsCookieService::SetC
CVSS Information
N/A
Vulnerability Type
N/A