CVE-2012-0451

CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before…

published March 14, 2012

CVSS
—
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02442 · 84.1th percentile
Published
2012-03-14T19:00Z
EPSS history
Timeline
  • 14 MAR 19:00Z
    CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before…
    cvelistv5