CVE-2007-2291

The CVE-2007-2291 entry describes a CRLF (HTTP header) injection vulnerability in the Digest Authentication support of Microsoft Internet Explorer 7.0.5730.11. The flaw permits remote attackers to perform HTTP response splitting by injecting a line feed (%0a) into the username attribute, potentia...