CVE-2011-2605: Improper Control of Generation of Code

CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing...

PT-2011-3954

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.18 Mozilla Firefox versions 4.x through 4.0.1 Thunderbird versions prior to 3.1.11 Description A CRLF injection issue exists in the nsCookieService::SetCookieStringInternal function, allowing remote...