Every CVE Search/ Get API key

CVE-2011-2605

CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk...

4.3 MediumFix available

CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing a \n (newline) character, which is not properly handled in a JavaScript "document.cookie =" expression, a different vulnerability than CVE-2011-2374.

Exploit likelihood

1.03%Down 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing a \n (newline) character, which is not properly handled in a JavaScript "document.cookie =" expression, a different vulnerability than CVE-2011-2374.

Record
CVE-2011-2605
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-94
Updated
2026-11-02
CVE List No score

CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing a \n (newline) character, which is not properly handled in a JavaScript "document.cookie =" expression, a different vulnerability than CVE-2011-2374.

Record
CVE-2011-2605
Updated
2026-11-02
EUVDEUVD-2011-2588 No score

CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing a \n (newline) character, which is not properly handled in a JavaScript "document.cookie =" expression, a different vulnerability than CVE-2011-2374.

Record
EUVD-2011-2588
Updated
2026-11-03
GitHub AdvisoriesGHSA-m4ch-8pc5-rpx2 No score

CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk...

CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing a \n (newline) character, which is not properly handled in a JavaScript "document.cookie =" expression, a different vulnerability than CVE-2011-2374.

Record
GHSA-m4ch-8pc5-rpx2
Weakness
CWE-94
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
iceweasel
Debian:6.0
 before 3.5.16-8, plus listed versions
3.5.16-43.5.16-53.5.16-5~bpo50+13.5.16-63.5.16-6~bpo50+13.5.16-73.5.16-7~bpo50+13.5.16-8~bpo50+1
3.5.16-8
xulrunner
Debian:5.0
 before 1.9.0.19-12, plus listed versions
1.9.0.10-11.9.0.11-0lenny11.9.0.11-11.9.0.12-0lenny11.9.0.12-1
Show 25 moreShow less
1.9.0.13-0lenny11.9.0.13-11.9.0.14-0lenny11.9.0.14-11.9.0.15-0lenny11.9.0.16-11.9.0.18-11.9.0.19-11.9.0.19-111.9.0.19-21.9.0.19-31.9.0.19-41.9.0.19-51.9.0.19-61.9.0.19-71.9.0.19-81.9.0.19-91.9.0.5-11.9.0.6-11.9.0.7-0lenny11.9.0.7-0lenny21.9.0.7-11.9.0.8-11.9.0.9-0lenny21.9.0.9-1
1.9.0.19-12
iceape
Debian:6.0
 before 2.0.11-6, plus listed versions
2.0.11-22.0.11-32.0.11-42.0.11-5
2.0.11-6
icedove
Debian:6.0
 before 3.0.11-1+squeeze3, plus listed versions
3.0.11-13.0.11-1+squeeze13.0.11-1+squeeze2
3.0.11-1+squeeze3
firefox
Red Hat:enterprise_linux:4::as
 before 0:3.6.18-2.el4
0:3.6.18-2.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:3.6.18-2.el4
0:3.6.18-2.el4
firefox
Red Hat:enterprise_linux:4::desktop
 before 0:3.6.18-2.el4
0:3.6.18-2.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:3.6.18-2.el4
0:3.6.18-2.el4
firefox
Red Hat:enterprise_linux:4::es
 before 0:3.6.18-2.el4
0:3.6.18-2.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:3.6.18-2.el4
0:3.6.18-2.el4
Show 54 moreShow less
Affected packages
PackageAffectedFixed
firefox
Red Hat:enterprise_linux:4::ws
 before 0:3.6.18-2.el4
0:3.6.18-2.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:3.6.18-2.el4
0:3.6.18-2.el4
firefox
Red Hat:enterprise_linux:5::server
 before 0:3.6.18-1.el5_6
0:3.6.18-1.el5_6
firefox-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.6.18-1.el5_6
0:3.6.18-1.el5_6
xulrunner
Red Hat:enterprise_linux:5::server
 before 0:1.9.2.18-2.el5_6
0:1.9.2.18-2.el5_6
xulrunner-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.9.2.18-2.el5_6
0:1.9.2.18-2.el5_6
xulrunner-devel
Red Hat:enterprise_linux:5::server
 before 0:1.9.2.18-2.el5_6
0:1.9.2.18-2.el5_6
firefox
Red Hat:enterprise_linux:6::server
 before 0:3.6.18-1.el6_1
0:3.6.18-1.el6_1
firefox-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:3.6.18-1.el6_1
0:3.6.18-1.el6_1
xulrunner
Red Hat:enterprise_linux:6::server
 before 0:1.9.2.18-2.el6_1
0:1.9.2.18-2.el6_1
xulrunner-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.9.2.18-2.el6_1
0:1.9.2.18-2.el6_1
xulrunner-devel
Red Hat:enterprise_linux:6::server
 before 0:1.9.2.18-2.el6_1
0:1.9.2.18-2.el6_1
thunderbird
Red Hat:enterprise_linux:6::server
 before 0:3.1.11-2.el6_1
0:3.1.11-2.el6_1
thunderbird-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:3.1.11-2.el6_1
0:3.1.11-2.el6_1
thunderbird
Red Hat:enterprise_linux:4::as
 before 0:1.5.0.12-39.el4
0:1.5.0.12-39.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:1.5.0.12-39.el4
0:1.5.0.12-39.el4
thunderbird
Red Hat:enterprise_linux:4::desktop
 before 0:1.5.0.12-39.el4
0:1.5.0.12-39.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:1.5.0.12-39.el4
0:1.5.0.12-39.el4
thunderbird
Red Hat:enterprise_linux:4::es
 before 0:1.5.0.12-39.el4
0:1.5.0.12-39.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:1.5.0.12-39.el4
0:1.5.0.12-39.el4
thunderbird
Red Hat:enterprise_linux:4::ws
 before 0:1.5.0.12-39.el4
0:1.5.0.12-39.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:1.5.0.12-39.el4
0:1.5.0.12-39.el4
thunderbird
Red Hat:enterprise_linux:5::client
 before 0:2.0.0.24-18.el5_6
0:2.0.0.24-18.el5_6
thunderbird-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.0.0.24-18.el5_6
0:2.0.0.24-18.el5_6
thunderbird
Red Hat:rhel_productivity:5
 before 0:2.0.0.24-18.el5_6
0:2.0.0.24-18.el5_6
thunderbird-debuginfo
Red Hat:rhel_productivity:5
 before 0:2.0.0.24-18.el5_6
0:2.0.0.24-18.el5_6
seamonkey
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-chat
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-devel
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-mail
Red Hat:enterprise_linux:4::as
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-chat
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-devel
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-mail
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-chat
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-devel
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-mail
Red Hat:enterprise_linux:4::es
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-chat
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-devel
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-71.el4
0:1.0.9-71.el4
seamonkey-mail
Red Hat:enterprise_linux:4::ws
 before 0:1.0.9-71.el4
0:1.0.9-71.el4

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-2605 is a medium vulnerability (CVSS 4.3) in Mozilla Firefox, published June 30, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.03%, the 63rd percentile. Fixed in iceweasel 3.5.16-8.

References

Show 58 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open