CVE-2011-3000

EPSS 1.3%
Published 29.09.2011 00:55:01
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting attacks via crafted header values.

Affected products Warnungen 0 Metrics 2 CWE 1 References 17

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version <= 3.6.22

Mozilla ≫ Firefox Version3.6

Mozilla ≫ Firefox Version3.6.2

Mozilla ≫ Firefox Version3.6.3

Mozilla ≫ Firefox Version3.6.4

Mozilla ≫ Firefox Version3.6.6

Mozilla ≫ Firefox Version3.6.7

Mozilla ≫ Firefox Version3.6.8

Mozilla ≫ Firefox Version3.6.9

Mozilla ≫ Firefox Version3.6.10

Mozilla ≫ Firefox Version3.6.11

Mozilla ≫ Firefox Version3.6.12

Mozilla ≫ Firefox Version3.6.13

Mozilla ≫ Firefox Version3.6.14

Mozilla ≫ Firefox Version3.6.15

Mozilla ≫ Firefox Version3.6.16

Mozilla ≫ Firefox Version3.6.17

Mozilla ≫ Firefox Version3.6.18

Mozilla ≫ Firefox Version3.6.19

Mozilla ≫ Firefox Version3.6.20

Mozilla ≫ Firefox Version3.6.21

Mozilla ≫ Firefox Version4.0

Mozilla ≫ Firefox Version4.0 Updatebeta1

Mozilla ≫ Firefox Version4.0 Updatebeta10

Mozilla ≫ Firefox Version4.0 Updatebeta11

Mozilla ≫ Firefox Version4.0 Updatebeta12

Mozilla ≫ Firefox Version4.0 Updatebeta2

Mozilla ≫ Firefox Version4.0 Updatebeta3

Mozilla ≫ Firefox Version4.0 Updatebeta4

Mozilla ≫ Firefox Version4.0 Updatebeta5

Mozilla ≫ Firefox Version4.0 Updatebeta6

Mozilla ≫ Firefox Version4.0 Updatebeta7

Mozilla ≫ Firefox Version4.0 Updatebeta8

Mozilla ≫ Firefox Version4.0 Updatebeta9

Mozilla ≫ Firefox Version4.0.1

Mozilla ≫ Firefox Version5.0

Mozilla ≫ Firefox Version6.0

Mozilla ≫ Thunderbird Version <= 6.0.2

Mozilla ≫ Thunderbird Version0.1

Mozilla ≫ Thunderbird Version0.2

Mozilla ≫ Thunderbird Version0.3

Mozilla ≫ Thunderbird Version0.4

Mozilla ≫ Thunderbird Version0.5

Mozilla ≫ Thunderbird Version0.6

Mozilla ≫ Thunderbird Version0.7

Mozilla ≫ Thunderbird Version0.7.1

Mozilla ≫ Thunderbird Version0.7.2

Mozilla ≫ Thunderbird Version0.7.3

Mozilla ≫ Thunderbird Version0.8

Mozilla ≫ Thunderbird Version0.9

Mozilla ≫ Thunderbird Version1.0

Mozilla ≫ Thunderbird Version1.0.1

Mozilla ≫ Thunderbird Version1.0.2

Mozilla ≫ Thunderbird Version1.0.3

Mozilla ≫ Thunderbird Version1.0.4

Mozilla ≫ Thunderbird Version1.0.5

Mozilla ≫ Thunderbird Version1.0.5 Updatebeta

Mozilla ≫ Thunderbird Version1.0.6

Mozilla ≫ Thunderbird Version1.0.7

Mozilla ≫ Thunderbird Version1.0.8

Mozilla ≫ Thunderbird Version1.5

Mozilla ≫ Thunderbird Version1.5 Updatebeta2

Mozilla ≫ Thunderbird Version1.5.0.1

Mozilla ≫ Thunderbird Version1.5.0.2

Mozilla ≫ Thunderbird Version1.5.0.3

Mozilla ≫ Thunderbird Version1.5.0.4

Mozilla ≫ Thunderbird Version1.5.0.5

Mozilla ≫ Thunderbird Version1.5.0.6

Mozilla ≫ Thunderbird Version1.5.0.7

Mozilla ≫ Thunderbird Version1.5.0.8

Mozilla ≫ Thunderbird Version1.5.0.9

Mozilla ≫ Thunderbird Version1.5.0.10

Mozilla ≫ Thunderbird Version1.5.0.11

Mozilla ≫ Thunderbird Version1.5.0.12

Mozilla ≫ Thunderbird Version1.5.0.13

Mozilla ≫ Thunderbird Version1.5.0.14

Mozilla ≫ Thunderbird Version1.5.1

Mozilla ≫ Thunderbird Version1.5.2

Mozilla ≫ Thunderbird Version1.7.1

Mozilla ≫ Thunderbird Version1.7.3

Mozilla ≫ Thunderbird Version2.0

Mozilla ≫ Thunderbird Version2.0.0.0

Mozilla ≫ Thunderbird Version2.0.0.1

Mozilla ≫ Thunderbird Version2.0.0.2

Mozilla ≫ Thunderbird Version2.0.0.3

Mozilla ≫ Thunderbird Version2.0.0.4

Mozilla ≫ Thunderbird Version2.0.0.5

Mozilla ≫ Thunderbird Version2.0.0.6

Mozilla ≫ Thunderbird Version2.0.0.7

Mozilla ≫ Thunderbird Version2.0.0.8

Mozilla ≫ Thunderbird Version2.0.0.9

Mozilla ≫ Thunderbird Version2.0.0.11

Mozilla ≫ Thunderbird Version2.0.0.12

Mozilla ≫ Thunderbird Version2.0.0.13

Mozilla ≫ Thunderbird Version2.0.0.14

Mozilla ≫ Thunderbird Version2.0.0.15

Mozilla ≫ Thunderbird Version2.0.0.16

Mozilla ≫ Thunderbird Version2.0.0.17

Mozilla ≫ Thunderbird Version2.0.0.18

Mozilla ≫ Thunderbird Version2.0.0.19

Mozilla ≫ Thunderbird Version2.0.0.20

Mozilla ≫ Thunderbird Version2.0.0.21

Mozilla ≫ Thunderbird Version2.0.0.22

Mozilla ≫ Thunderbird Version2.0.0.23

Mozilla ≫ Thunderbird Version2.0_.4

Mozilla ≫ Thunderbird Version2.0_.5

Mozilla ≫ Thunderbird Version2.0_.6

Mozilla ≫ Thunderbird Version2.0_.9

Mozilla ≫ Thunderbird Version2.0_.12

Mozilla ≫ Thunderbird Version2.0_.13

Mozilla ≫ Thunderbird Version2.0_.14

Mozilla ≫ Thunderbird Version2.0_8

Mozilla ≫ Thunderbird Version3.0

Mozilla ≫ Thunderbird Version3.0.1

Mozilla ≫ Thunderbird Version3.0.2

Mozilla ≫ Thunderbird Version3.0.3

Mozilla ≫ Thunderbird Version3.0.4

Mozilla ≫ Thunderbird Version3.0.5

Mozilla ≫ Thunderbird Version3.0.6

Mozilla ≫ Thunderbird Version3.0.7

Mozilla ≫ Thunderbird Version3.0.8

Mozilla ≫ Thunderbird Version3.0.9

Mozilla ≫ Thunderbird Version3.0.10

Mozilla ≫ Thunderbird Version3.0.11

Mozilla ≫ Thunderbird Version3.1

Mozilla ≫ Thunderbird Version3.1.1

Mozilla ≫ Thunderbird Version3.1.2

Mozilla ≫ Thunderbird Version3.1.3

Mozilla ≫ Thunderbird Version3.1.4

Mozilla ≫ Thunderbird Version3.1.5

Mozilla ≫ Thunderbird Version3.1.6

Mozilla ≫ Thunderbird Version3.1.7

Mozilla ≫ Thunderbird Version3.1.8

Mozilla ≫ Thunderbird Version3.1.9

Mozilla ≫ Thunderbird Version3.1.10

Mozilla ≫ Thunderbird Version3.1.11

Mozilla ≫ Thunderbird Version5.0

Mozilla ≫ Seamonkey Version <= 2.3.3

Mozilla ≫ Seamonkey Version1.0

Mozilla ≫ Seamonkey Version1.0 Editionalpha

Mozilla ≫ Seamonkey Version1.0 Editionbeta

Mozilla ≫ Seamonkey Version1.0 Editiondev

Mozilla ≫ Seamonkey Version1.0 Updatealpha

Mozilla ≫ Seamonkey Version1.0 Updatebeta

Mozilla ≫ Seamonkey Version1.0.1

Mozilla ≫ Seamonkey Version1.0.2

Mozilla ≫ Seamonkey Version1.0.3

Mozilla ≫ Seamonkey Version1.0.4

Mozilla ≫ Seamonkey Version1.0.5

Mozilla ≫ Seamonkey Version1.0.6

Mozilla ≫ Seamonkey Version1.0.7

Mozilla ≫ Seamonkey Version1.0.8

Mozilla ≫ Seamonkey Version1.0.9

Mozilla ≫ Seamonkey Version1.0.99

Mozilla ≫ Seamonkey Version1.1

Mozilla ≫ Seamonkey Version1.1 Updatealpha

Mozilla ≫ Seamonkey Version1.1 Updatebeta

Mozilla ≫ Seamonkey Version1.1.1

Mozilla ≫ Seamonkey Version1.1.2

Mozilla ≫ Seamonkey Version1.1.3

Mozilla ≫ Seamonkey Version1.1.4

Mozilla ≫ Seamonkey Version1.1.5

Mozilla ≫ Seamonkey Version1.1.5 Update1.1.10

Mozilla ≫ Seamonkey Version1.1.6

Mozilla ≫ Seamonkey Version1.1.7

Mozilla ≫ Seamonkey Version1.1.8

Mozilla ≫ Seamonkey Version1.1.9

Mozilla ≫ Seamonkey Version1.1.10

Mozilla ≫ Seamonkey Version1.1.11

Mozilla ≫ Seamonkey Version1.1.12

Mozilla ≫ Seamonkey Version1.1.13

Mozilla ≫ Seamonkey Version1.1.14

Mozilla ≫ Seamonkey Version1.1.15

Mozilla ≫ Seamonkey Version1.1.16

Mozilla ≫ Seamonkey Version1.1.17

Mozilla ≫ Seamonkey Version1.1.18

Mozilla ≫ Seamonkey Version1.1.19

Mozilla ≫ Seamonkey Version1.5.0.8

Mozilla ≫ Seamonkey Version1.5.0.9

Mozilla ≫ Seamonkey Version1.5.0.10

Mozilla ≫ Seamonkey Version2.0

Mozilla ≫ Seamonkey Version2.0 Updatealpha_1

Mozilla ≫ Seamonkey Version2.0 Updatealpha_2

Mozilla ≫ Seamonkey Version2.0 Updatealpha_3

Mozilla ≫ Seamonkey Version2.0 Updatebeta_1

Mozilla ≫ Seamonkey Version2.0 Updatebeta_2

Mozilla ≫ Seamonkey Version2.0 Updaterc1

Mozilla ≫ Seamonkey Version2.0 Updaterc2

Mozilla ≫ Seamonkey Version2.0.1

Mozilla ≫ Seamonkey Version2.0.2

Mozilla ≫ Seamonkey Version2.0.3

Mozilla ≫ Seamonkey Version2.0.4

Mozilla ≫ Seamonkey Version2.0.5

Mozilla ≫ Seamonkey Version2.0.6

Mozilla ≫ Seamonkey Version2.0.7

Mozilla ≫ Seamonkey Version2.0.8

Mozilla ≫ Seamonkey Version2.0.9

Mozilla ≫ Seamonkey Version2.0.10

Mozilla ≫ Seamonkey Version2.0.11

Mozilla ≫ Seamonkey Version2.0.12

Mozilla ≫ Seamonkey Version2.0.13

Mozilla ≫ Seamonkey Version2.0.14

Mozilla ≫ Seamonkey Version2.0a1 Editionpre

Mozilla ≫ Seamonkey Version2.0a1pre

Mozilla ≫ Seamonkey Version2.1 Updatealpha1

Mozilla ≫ Seamonkey Version2.1 Updatealpha2

Mozilla ≫ Seamonkey Version2.1 Updatealpha3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.3%	0.779

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html

http://lists.opensuse.org/opensuse-updates/2011-10/msg00002.html

http://secunia.com/advisories/46315

http://www.debian.org/security/2011/dsa-2312

http://www.debian.org/security/2011/dsa-2313

http://www.debian.org/security/2011/dsa-2317

http://www.mandriva.com/security/advisories?name=MDVSA-2011:139

http://www.mandriva.com/security/advisories?name=MDVSA-2011:140

http://www.mandriva.com/security/advisories?name=MDVSA-2011:141

http://www.mandriva.com/security/advisories?name=MDVSA-2011:142

http://www.redhat.com/support/errata/RHSA-2011-1341.html

http://www.mozilla.org/security/announce/2011/mfsa2011-39.html