CVE-2007-2292: Input Validation
CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2292?
CVE-2007-2292 is classified as a high-severity vulnerability due to its potential to allow remote attackers to conduct HTTP request splitting attacks.
How do I fix CVE-2007-2292?
To mitigate CVE-2007-2292, users should upgrade to Mozilla Firefox version 2.0.0.8 or later, or to SeaMonkey version 1.1.5 or later.
Which software is affected by CVE-2007-2292?
CVE-2007-2292 affects Mozilla Firefox versions prior to 2.0.0.8, SeaMonkey versions prior to 1.1.5, and Internet Explorer version 7.0.5730.11.
What type of attack can be executed due to CVE-2007-2292?
CVE-2007-2292 allows attackers to execute HTTP request splitting attacks through CRLF injection.
How can I determine if my system is vulnerable to CVE-2007-2292?
You can determine if your system is vulnerable to CVE-2007-2292 by checking the version of your browser against the known affected versions.