3921 matches found
Firefox < 7.0 Multiple Vulnerabilities (Mac OS X)
The installed version of Firefox is earlier than 7.0 and thus, is potentially affected by the following security issues : - If an attacker could trick a user into holding down the 'Enter' key, via a malicious game, for example, a malicious application or extension could be downloaded and...
APC PowerChute Network Shutdown HTTP Response Splitting Vulnerability
APC PowerChute Network Shutdown is prone to HTTP response splitting vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2011-3000
Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting...
CVE-2011-3000
Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting...
Firefox 3.6.x < 3.6.23 Multiple Vulnerabilities
The installed version of Firefox 3.6.x is earlier than 3.6.23 and is affected by the following vulnerabilities: - An integer underflow exists when handling a large JavaScript 'RegExp' expression that can allow a potentially exploitable crash. CVE-2011-2998 - If an attacker could trick a user into...
Mozilla Thunderbird < 7.0 Multiple Vulnerabilities
The installed version of Thunderbird is earlier than 7.0 and thus, is potentially affected by the following security issues : - If an attacker could trick a user into holding down the 'Enter' key, via a malicious game, for example, a malicious application or extension could be downloaded and...
CVE-2011-3000
Affected software: Mozilla Firefox before 3.6.23 and 4.x through 6; also affects Thunderbird before 7.0 and SeaMonkey before 2.4. Root cause: HTTP response handling flaw that allows HTTP response splitting when responses contain multiple Location, Content-Length, or Content-Disposition headers. I...
Mozilla Thunderbird < 7.0 Multiple Vulnerabilities
Binary data 6029.prm...
Mozilla Firefox 3.6 < 3.6.23 Multiple Vulnerabilities
Binary data 801241.prm...
Mozilla Thunderbird 6 Multiple Vulnerabilities
Binary data 801344.prm...
Mozilla Firefox 3.6 < 3.6.23 Multiple Vulnerabilities
Binary data 6027.prm...
CVE-2011-3000
Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting...
CVE-2011-3000: Improper Control of Generation of Code
Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting...
SeaMonkey 2.x < 2.4.0 Multiple Vulnerabilities
Binary data 6030.prm...
Firefox < 7.0 Multiple Vulnerabilities
The installed version of Firefox is earlier than 7.0 and thus, is potentially affected by the following security issues : - If an attacker could trick a user into holding down the 'Enter' key, via a malicious game, for example, a malicious application or extension could be downloaded and...
Mozilla Firefox < 7.0 Multiple Vulnerabilities
Binary data 6028.prm...
SeaMonkey < 2.4.0 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 2.4.0. Such versions are potentially affected by the following security issues : - If an attacker could trick a user into holding down the 'Enter' key, via a malicious game, for example, a malicious application or extension could be downloaded an...
Mozilla SeaMonkey 2.x < 2.4.0 Multiple Vulnerabilities
Binary data 801225.prm...
Mozilla Firefox 6.0 Multiple Vulnerabilities
Binary data 801285.prm...
Mozilla: Defense against multiple Location headers due to CRLF Injection (MFSA 2011-39)
Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting...