CVE-2007-2292
CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0...
4.3 Medium
CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.
Exploit likelihood
12.7%Down 15.6 points since Feb 4, 2022
What each source reports
NVD Score used
CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.
- Record
CVE-2007-2292- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.
- Record
CVE-2007-2292- Updated
- 2026-11-02
EUVDEUVD-2007-2287 No score
CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.
- Record
EUVD-2007-2287- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jjpj-fj74-73gv No score
CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0...
CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.
- Record
GHSA-jjpj-fj74-73gv- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:4.0 From an advisory covering 9 CVEs |
before 1.8.0.14~pre071019b-0etch1, plus listed versions 1.8.0.11-21.8.0.11-31.8.0.11-41.8.0.11-4.11.8.0.12-0etch1 Show 4 moreShow less1.8.0.13~pre070720-0etch11.8.0.13~pre070720-0etch21.8.0.13~pre070720-0etch31.8.0.13~pre070720-0etch3+lenny1 |
1.8.0.14~pre071019b-0etch1 |
iceweaselDebian:4.0 From an advisory covering 9 CVEs |
before 2.0.0.6+2.0.0.8-0etch1, plus listed versions 2.0.0.3-12.0.0.3-22.0.0.4-0etch12.0.0.4-12.0.0.5-0etch1 Show 6 moreShow less2.0.0.5-0etch1+lenny12.0.0.5-12.0.0.5-22.0.0.6-0etch12.0.0.6-0etch1+lenny12.0.0.6-1 |
2.0.0.6+2.0.0.8-0etch1 |
iceapeDebian:4.0 From an advisory covering 9 CVEs |
before 1.0.11~pre071022-0etch1, plus listed versions 1.0.10~pre070720-0etch11.0.10~pre070720-0etch1+lenny11.0.10~pre070720-0etch31.0.10~pre070720-0etch3+lenny11.0.8-41.0.9-0etch1 |
1.0.11~pre071022-0etch1 |
xulrunnerDebian:5.0 From an advisory covering 9 CVEs |
before 1.8.0.14~pre071019b-0lenny1 | 1.8.0.14~pre071019b-0lenny1 |
iceapeDebian:5.0 From an advisory covering 9 CVEs |
before 1.0.11~pre071022-0etch1+lenny1 | 1.0.11~pre071022-0etch1+lenny1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
Show 129 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.7.el4 | 0:1.5.0.12-0.7.el4 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 9 CVEs |
before 0:1.5.0.12-6.el5 | 0:1.5.0.12-6.el5 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.6.el2 | 0:1.0.9-0.6.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:1.0.9-0.5.el3 | 0:1.0.9-0.5.el3 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.0.9-6.el4 | 0:1.0.9-6.el4 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:1.5.0.12-0.5.el4 | 0:1.5.0.12-0.5.el4 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-5.el5 | 0:1.5.0.12-5.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 9 CVEs |
before 0:1.5.0.12-5.el5 | 0:1.5.0.12-5.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2292 is a medium vulnerability (CVSS 4.3) in Mozilla Firefox, published April 26, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 12.7%, the 96th percentile. No source names a fixed version.
References
redhat.com/archives/fedora-package-announce/2007-October/msg00285.html
securityfocus.com/archive/1/482876/100/200/threaded
wisec.it/vulns.php?id=11
securitytracker.com/id?1017968
vupen.com/english/advisories/2007/3587
secunia.com/advisories/27414
Show 94 moreShow less
issues.rpath.com/browse/RPL-1858
gentoo.org/security/en/glsa/glsa-200711-14.xml
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
usn.ubuntu.com/535-1
debian.org/security/2007/dsa-1401
novell.com/linux/security/advisories/2007_57_mozilla.html
mozilla.org/security/announce/2007/mfsa2007-31.html
exchange.xforce.ibmcloud.com/vulnerabilities/33981
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10195
mandriva.com/en/security/advisories?name=MDKSA-2007:202
bugzilla.mozilla.org/show_bug.cgi?id=378787
securityreason.com/securityalert/2654
support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html
sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1
ubuntu.com/usn/usn-536-1
nvd.nist.gov/vuln/detail/CVE-2007-2292
github.com/advisories/GHSA-jjpj-fj74-73gv
access.redhat.com/errata/RHSA-2007:0979
en.wikipedia.org/wiki/HTTP_response_splitting
bugzilla.redhat.com/show_bug.cgi?id=246248
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0979.json
cve.org/CVERecord?id=CVE-2007-1095