1. Home
  2. Vulnerabilities
  3. CVE-2011-2605

CVE-2011-2605

CVSS v2.0 4.3 (Medium)
43% Progress
EPSS 0.76 % (81th)
0.76% Progress
Affected Products 2
Advisories 5
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing a \n (newline) character, which is not properly handled in a JavaScript "document.cookie =" expression, a different vulnerability than CVE-2011-2374.

Weaknesses
CWE-94
Improper Control of Generation of Code ('Code Injection')
Related CVEs
CVE Status
PUBLISHED
CNA
MITRE
Published Date
2011-06-30 16:55:05
(13 years ago)
Updated Date
2017-09-19 01:33:05
(7 years ago)

Affected Products

Mozilla

Configuration #1

    CPE23 From Up To
  Mozilla Firefox 3.6.17 and prior versions cpe:2.3:a:mozilla:firefox <= 3.6.17
  Mozilla Firefox 1.0 cpe:2.3:a:mozilla:firefox:1.0
  Mozilla Firefox 1.0 Preview Release cpe:2.3:a:mozilla:firefox:1.0:preview_release
  Mozilla Firefox 1.0.1 cpe:2.3:a:mozilla:firefox:1.0.1
  Mozilla Firefox 1.0.2 cpe:2.3:a:mozilla:firefox:1.0.2
  Mozilla Firefox 1.0.3 cpe:2.3:a:mozilla:firefox:1.0.3
  Mozilla Firefox 1.0.4 cpe:2.3:a:mozilla:firefox:1.0.4
  Mozilla Firefox 1.0.5 cpe:2.3:a:mozilla:firefox:1.0.5
  Mozilla Firefox 1.0.6 cpe:2.3:a:mozilla:firefox:1.0.6
  Mozilla Firefox 1.0.7 cpe:2.3:a:mozilla:firefox:1.0.7
  Mozilla Firefox 1.0.8 cpe:2.3:a:mozilla:firefox:1.0.8
  Mozilla Firefox 1.5 cpe:2.3:a:mozilla:firefox:1.5
  Mozilla Firefox 1.5 Beta1 cpe:2.3:a:mozilla:firefox:1.5:beta1
  Mozilla Firefox 1.5 Beta2 cpe:2.3:a:mozilla:firefox:1.5:beta2
  Mozilla Firefox 1.5.0.1 cpe:2.3:a:mozilla:firefox:1.5.0.1
  Mozilla Firefox 1.5.0.2 cpe:2.3:a:mozilla:firefox:1.5.0.2
  Mozilla Firefox 1.5.0.3 cpe:2.3:a:mozilla:firefox:1.5.0.3
  Mozilla Firefox 1.5.0.4 cpe:2.3:a:mozilla:firefox:1.5.0.4
  Mozilla Firefox 1.5.0.5 cpe:2.3:a:mozilla:firefox:1.5.0.5
  Mozilla Firefox 1.5.0.6 cpe:2.3:a:mozilla:firefox:1.5.0.6
  Mozilla Firefox 1.5.0.7 cpe:2.3:a:mozilla:firefox:1.5.0.7
  Mozilla Firefox 1.5.0.8 cpe:2.3:a:mozilla:firefox:1.5.0.8
  Mozilla Firefox 1.5.0.9 cpe:2.3:a:mozilla:firefox:1.5.0.9
  Mozilla Firefox 1.5.0.10 cpe:2.3:a:mozilla:firefox:1.5.0.10
  Mozilla Firefox 1.5.0.11 cpe:2.3:a:mozilla:firefox:1.5.0.11
  Mozilla Firefox 1.5.0.12 cpe:2.3:a:mozilla:firefox:1.5.0.12
  Mozilla Firefox 1.5.1 cpe:2.3:a:mozilla:firefox:1.5.1
  Mozilla Firefox 1.5.2 cpe:2.3:a:mozilla:firefox:1.5.2
  Mozilla Firefox 1.5.3 cpe:2.3:a:mozilla:firefox:1.5.3
  Mozilla Firefox 1.5.4 cpe:2.3:a:mozilla:firefox:1.5.4
  Mozilla Firefox 1.5.5 cpe:2.3:a:mozilla:firefox:1.5.5
  Mozilla Firefox 1.5.6 cpe:2.3:a:mozilla:firefox:1.5.6
  Mozilla Firefox 1.5.7 cpe:2.3:a:mozilla:firefox:1.5.7
  Mozilla Firefox 1.5.8 cpe:2.3:a:mozilla:firefox:1.5.8
  Mozilla Firefox 2.0 cpe:2.3:a:mozilla:firefox:2.0
  Mozilla Firefox 2.0.0.1 cpe:2.3:a:mozilla:firefox:2.0.0.1
  Mozilla Firefox 2.0.0.2 cpe:2.3:a:mozilla:firefox:2.0.0.2
  Mozilla Firefox 2.0.0.3 cpe:2.3:a:mozilla:firefox:2.0.0.3
  Mozilla Firefox 2.0.0.4 cpe:2.3:a:mozilla:firefox:2.0.0.4
  Mozilla Firefox 2.0.0.5 cpe:2.3:a:mozilla:firefox:2.0.0.5
  Mozilla Firefox 2.0.0.6 cpe:2.3:a:mozilla:firefox:2.0.0.6
  Mozilla Firefox 2.0.0.7 cpe:2.3:a:mozilla:firefox:2.0.0.7
  Mozilla Firefox 2.0.0.8 cpe:2.3:a:mozilla:firefox:2.0.0.8
  Mozilla Firefox 2.0.0.9 cpe:2.3:a:mozilla:firefox:2.0.0.9
  Mozilla Firefox 2.0.0.10 cpe:2.3:a:mozilla:firefox:2.0.0.10
  Mozilla Firefox 2.0.0.11 cpe:2.3:a:mozilla:firefox:2.0.0.11
  Mozilla Firefox 2.0.0.12 cpe:2.3:a:mozilla:firefox:2.0.0.12
  Mozilla Firefox 2.0.0.13 cpe:2.3:a:mozilla:firefox:2.0.0.13
  Mozilla Firefox 2.0.0.14 cpe:2.3:a:mozilla:firefox:2.0.0.14
  Mozilla Firefox 2.0.0.15 cpe:2.3:a:mozilla:firefox:2.0.0.15
  Mozilla Firefox 2.0.0.16 cpe:2.3:a:mozilla:firefox:2.0.0.16
  Mozilla Firefox 2.0.0.17 cpe:2.3:a:mozilla:firefox:2.0.0.17
  Mozilla Firefox 2.0.0.18 cpe:2.3:a:mozilla:firefox:2.0.0.18
  Mozilla Firefox 2.0.0.19 cpe:2.3:a:mozilla:firefox:2.0.0.19
  Mozilla Firefox 2.0.0.20 cpe:2.3:a:mozilla:firefox:2.0.0.20
  Mozilla Firefox 3.0 cpe:2.3:a:mozilla:firefox:3.0
  Mozilla Firefox 3.0.1 cpe:2.3:a:mozilla:firefox:3.0.1
  Mozilla Firefox 3.0.2 cpe:2.3:a:mozilla:firefox:3.0.2
  Mozilla Firefox 3.0.3 cpe:2.3:a:mozilla:firefox:3.0.3
  Mozilla Firefox 3.0.4 cpe:2.3:a:mozilla:firefox:3.0.4
  Mozilla Firefox 3.0.5 cpe:2.3:a:mozilla:firefox:3.0.5
  Mozilla Firefox 3.0.6 cpe:2.3:a:mozilla:firefox:3.0.6
  Mozilla Firefox 3.0.7 cpe:2.3:a:mozilla:firefox:3.0.7
  Mozilla Firefox 3.0.8 cpe:2.3:a:mozilla:firefox:3.0.8
  Mozilla Firefox 3.0.9 cpe:2.3:a:mozilla:firefox:3.0.9
  Mozilla Firefox 3.0.10 cpe:2.3:a:mozilla:firefox:3.0.10
  Mozilla Firefox 3.0.11 cpe:2.3:a:mozilla:firefox:3.0.11
  Mozilla Firefox 3.0.12 cpe:2.3:a:mozilla:firefox:3.0.12
  Mozilla Firefox 3.0.13 cpe:2.3:a:mozilla:firefox:3.0.13
  Mozilla Firefox 3.0.14 cpe:2.3:a:mozilla:firefox:3.0.14
  Mozilla Firefox 3.0.15 cpe:2.3:a:mozilla:firefox:3.0.15
  Mozilla Firefox 3.0.16 cpe:2.3:a:mozilla:firefox:3.0.16
  Mozilla Firefox 3.0.17 cpe:2.3:a:mozilla:firefox:3.0.17
  Mozilla Firefox 3.5 cpe:2.3:a:mozilla:firefox:3.5
  Mozilla Firefox 3.5.1 cpe:2.3:a:mozilla:firefox:3.5.1
  Mozilla Firefox 3.5.2 cpe:2.3:a:mozilla:firefox:3.5.2
  Mozilla Firefox 3.5.3 cpe:2.3:a:mozilla:firefox:3.5.3
  Mozilla Firefox 3.5.4 cpe:2.3:a:mozilla:firefox:3.5.4
  Mozilla Firefox 3.5.5 cpe:2.3:a:mozilla:firefox:3.5.5
  Mozilla Firefox 3.5.6 cpe:2.3:a:mozilla:firefox:3.5.6
  Mozilla Firefox 3.5.7 cpe:2.3:a:mozilla:firefox:3.5.7
  Mozilla Firefox 3.5.8 cpe:2.3:a:mozilla:firefox:3.5.8
  Mozilla Firefox 3.5.9 cpe:2.3:a:mozilla:firefox:3.5.9
  Mozilla Firefox 3.5.10 cpe:2.3:a:mozilla:firefox:3.5.10
  Mozilla Firefox 3.5.11 cpe:2.3:a:mozilla:firefox:3.5.11
  Mozilla Firefox 3.5.12 cpe:2.3:a:mozilla:firefox:3.5.12
  Mozilla Firefox 3.5.13 cpe:2.3:a:mozilla:firefox:3.5.13
  Mozilla Firefox 3.5.14 cpe:2.3:a:mozilla:firefox:3.5.14
  Mozilla Firefox 3.5.15 cpe:2.3:a:mozilla:firefox:3.5.15
  Mozilla Firefox 3.5.16 cpe:2.3:a:mozilla:firefox:3.5.16
  Mozilla Firefox 3.5.17 cpe:2.3:a:mozilla:firefox:3.5.17
  Mozilla Firefox 3.5.18 cpe:2.3:a:mozilla:firefox:3.5.18
  Mozilla Firefox 3.5.19 cpe:2.3:a:mozilla:firefox:3.5.19
  Mozilla Firefox 3.6 cpe:2.3:a:mozilla:firefox:3.6
  Mozilla Firefox 3.6.2 cpe:2.3:a:mozilla:firefox:3.6.2
  Mozilla Firefox 3.6.3 cpe:2.3:a:mozilla:firefox:3.6.3
  Mozilla Firefox 3.6.4 cpe:2.3:a:mozilla:firefox:3.6.4
  Mozilla Firefox 3.6.6 cpe:2.3:a:mozilla:firefox:3.6.6
  Mozilla Firefox 3.6.7 cpe:2.3:a:mozilla:firefox:3.6.7
  Mozilla Firefox 3.6.8 cpe:2.3:a:mozilla:firefox:3.6.8
  Mozilla Firefox 3.6.9 cpe:2.3:a:mozilla:firefox:3.6.9
  Mozilla Firefox 3.6.10 cpe:2.3:a:mozilla:firefox:3.6.10
  Mozilla Firefox 3.6.11 cpe:2.3:a:mozilla:firefox:3.6.11
  Mozilla Firefox 3.6.12 cpe:2.3:a:mozilla:firefox:3.6.12
  Mozilla Firefox 3.6.13 cpe:2.3:a:mozilla:firefox:3.6.13
  Mozilla Firefox 3.6.14 cpe:2.3:a:mozilla:firefox:3.6.14
  Mozilla Firefox 3.6.15 cpe:2.3:a:mozilla:firefox:3.6.15
  Mozilla Firefox 3.6.16 cpe:2.3:a:mozilla:firefox:3.6.16

Configuration #2

    CPE23 From Up To
  Mozilla Thunderbird 3.1.10 and prior versions cpe:2.3:a:mozilla:thunderbird <= 3.1.10
  Mozilla Thunderbird 0.1 cpe:2.3:a:mozilla:thunderbird:0.1
  Mozilla Thunderbird 0.2 cpe:2.3:a:mozilla:thunderbird:0.2
  Mozilla Thunderbird 0.3 cpe:2.3:a:mozilla:thunderbird:0.3
  Mozilla Thunderbird 0.4 cpe:2.3:a:mozilla:thunderbird:0.4
  Mozilla Thunderbird 0.5 cpe:2.3:a:mozilla:thunderbird:0.5
  Mozilla Thunderbird 0.6 cpe:2.3:a:mozilla:thunderbird:0.6
  Mozilla Thunderbird 0.7 cpe:2.3:a:mozilla:thunderbird:0.7
  Mozilla Thunderbird 0.7.1 cpe:2.3:a:mozilla:thunderbird:0.7.1
  Mozilla Thunderbird 0.7.2 cpe:2.3:a:mozilla:thunderbird:0.7.2
  Mozilla Thunderbird 0.7.3 cpe:2.3:a:mozilla:thunderbird:0.7.3
  Mozilla Thunderbird 0.8 cpe:2.3:a:mozilla:thunderbird:0.8
  Mozilla Thunderbird 0.9 cpe:2.3:a:mozilla:thunderbird:0.9
  Mozilla Thunderbird 1.0 cpe:2.3:a:mozilla:thunderbird:1.0
  Mozilla Thunderbird 1.0.1 cpe:2.3:a:mozilla:thunderbird:1.0.1
  Mozilla Thunderbird 1.0.2 cpe:2.3:a:mozilla:thunderbird:1.0.2
  Mozilla Thunderbird 1.0.3 cpe:2.3:a:mozilla:thunderbird:1.0.3
  Mozilla Thunderbird 1.0.4 cpe:2.3:a:mozilla:thunderbird:1.0.4
  Mozilla Thunderbird 1.0.5 cpe:2.3:a:mozilla:thunderbird:1.0.5
  Mozilla Thunderbird 1.0.6 cpe:2.3:a:mozilla:thunderbird:1.0.6
  Mozilla Thunderbird 1.0.7 cpe:2.3:a:mozilla:thunderbird:1.0.7
  Mozilla Thunderbird 1.0.8 cpe:2.3:a:mozilla:thunderbird:1.0.8
  Mozilla Thunderbird 1.5 cpe:2.3:a:mozilla:thunderbird:1.5
  Mozilla Thunderbird 1.5 Beta2 cpe:2.3:a:mozilla:thunderbird:1.5:beta2
  Mozilla Thunderbird 1.5.0.1 cpe:2.3:a:mozilla:thunderbird:1.5.0.1
  Mozilla Thunderbird 1.5.0.2 cpe:2.3:a:mozilla:thunderbird:1.5.0.2
  Mozilla Thunderbird 1.5.0.3 cpe:2.3:a:mozilla:thunderbird:1.5.0.3
  Mozilla Thunderbird 1.5.0.4 cpe:2.3:a:mozilla:thunderbird:1.5.0.4
  Mozilla Thunderbird 1.5.0.5 cpe:2.3:a:mozilla:thunderbird:1.5.0.5
  Mozilla Thunderbird 1.5.0.6 cpe:2.3:a:mozilla:thunderbird:1.5.0.6
  Mozilla Thunderbird 1.5.0.7 cpe:2.3:a:mozilla:thunderbird:1.5.0.7
  Mozilla Thunderbird 1.5.0.8 cpe:2.3:a:mozilla:thunderbird:1.5.0.8
  Mozilla Thunderbird 1.5.0.9 cpe:2.3:a:mozilla:thunderbird:1.5.0.9
  Mozilla Thunderbird 1.5.0.10 cpe:2.3:a:mozilla:thunderbird:1.5.0.10
  Mozilla Thunderbird 1.5.0.11 cpe:2.3:a:mozilla:thunderbird:1.5.0.11
  Mozilla Thunderbird 1.5.0.12 cpe:2.3:a:mozilla:thunderbird:1.5.0.12
  Mozilla Thunderbird 1.5.0.13 cpe:2.3:a:mozilla:thunderbird:1.5.0.13
  Mozilla Thunderbird 1.5.0.14 cpe:2.3:a:mozilla:thunderbird:1.5.0.14
  Mozilla Thunderbird 1.5.1 cpe:2.3:a:mozilla:thunderbird:1.5.1
  Mozilla Thunderbird 1.5.2 cpe:2.3:a:mozilla:thunderbird:1.5.2
  Mozilla Thunderbird 1.7.1 cpe:2.3:a:mozilla:thunderbird:1.7.1
  Mozilla Thunderbird 1.7.3 cpe:2.3:a:mozilla:thunderbird:1.7.3
  Mozilla Thunderbird 2.0 cpe:2.3:a:mozilla:thunderbird:2.0
  Mozilla Thunderbird 2.0.0.0 cpe:2.3:a:mozilla:thunderbird:2.0.0.0
  Mozilla Thunderbird 2.0.0.1 cpe:2.3:a:mozilla:thunderbird:2.0.0.1
  Mozilla Thunderbird 2.0.0.2 cpe:2.3:a:mozilla:thunderbird:2.0.0.2
  Mozilla Thunderbird 2.0.0.3 cpe:2.3:a:mozilla:thunderbird:2.0.0.3
  Mozilla Thunderbird 2.0.0.4 cpe:2.3:a:mozilla:thunderbird:2.0.0.4
  Mozilla Thunderbird 2.0.0.5 cpe:2.3:a:mozilla:thunderbird:2.0.0.5
  Mozilla Thunderbird 2.0.0.6 cpe:2.3:a:mozilla:thunderbird:2.0.0.6
  Mozilla Thunderbird 2.0.0.7 cpe:2.3:a:mozilla:thunderbird:2.0.0.7
  Mozilla Thunderbird 2.0.0.8 cpe:2.3:a:mozilla:thunderbird:2.0.0.8
  Mozilla Thunderbird 2.0.0.9 cpe:2.3:a:mozilla:thunderbird:2.0.0.9
  Mozilla Thunderbird 2.0.0.12 cpe:2.3:a:mozilla:thunderbird:2.0.0.12
  Mozilla Thunderbird 2.0.0.14 cpe:2.3:a:mozilla:thunderbird:2.0.0.14
  Mozilla Thunderbird 2.0.0.16 cpe:2.3:a:mozilla:thunderbird:2.0.0.16
  Mozilla Thunderbird 2.0.0.17 cpe:2.3:a:mozilla:thunderbird:2.0.0.17
  Mozilla Thunderbird 2.0.0.18 cpe:2.3:a:mozilla:thunderbird:2.0.0.18
  Mozilla Thunderbird 2.0.0.19 cpe:2.3:a:mozilla:thunderbird:2.0.0.19
  Mozilla Thunderbird 2.0.0.21 cpe:2.3:a:mozilla:thunderbird:2.0.0.21
  Mozilla Thunderbird 2.0.0.22 cpe:2.3:a:mozilla:thunderbird:2.0.0.22
  Mozilla Thunderbird 2.0.0.23 cpe:2.3:a:mozilla:thunderbird:2.0.0.23
  Mozilla Thunderbird 3.0 cpe:2.3:a:mozilla:thunderbird:3.0
  Mozilla Thunderbird 3.0.1 cpe:2.3:a:mozilla:thunderbird:3.0.1
  Mozilla Thunderbird 3.0.2 cpe:2.3:a:mozilla:thunderbird:3.0.2
  Mozilla Thunderbird 3.0.3 cpe:2.3:a:mozilla:thunderbird:3.0.3
  Mozilla Thunderbird 3.0.4 cpe:2.3:a:mozilla:thunderbird:3.0.4
  Mozilla Thunderbird 3.0.5 cpe:2.3:a:mozilla:thunderbird:3.0.5
  Mozilla Thunderbird 3.0.6 cpe:2.3:a:mozilla:thunderbird:3.0.6
  Mozilla Thunderbird 3.0.7 cpe:2.3:a:mozilla:thunderbird:3.0.7
  Mozilla Thunderbird 3.0.8 cpe:2.3:a:mozilla:thunderbird:3.0.8
  Mozilla Thunderbird 3.0.9 cpe:2.3:a:mozilla:thunderbird:3.0.9
  Mozilla Thunderbird 3.0.10 cpe:2.3:a:mozilla:thunderbird:3.0.10
  Mozilla Thunderbird 3.0.11 cpe:2.3:a:mozilla:thunderbird:3.0.11
  Mozilla Thunderbird 3.1 cpe:2.3:a:mozilla:thunderbird:3.1
  Mozilla Thunderbird 3.1.1 cpe:2.3:a:mozilla:thunderbird:3.1.1
  Mozilla Thunderbird 3.1.2 cpe:2.3:a:mozilla:thunderbird:3.1.2
  Mozilla Thunderbird 3.1.3 cpe:2.3:a:mozilla:thunderbird:3.1.3
  Mozilla Thunderbird 3.1.4 cpe:2.3:a:mozilla:thunderbird:3.1.4
  Mozilla Thunderbird 3.1.5 cpe:2.3:a:mozilla:thunderbird:3.1.5
  Mozilla Thunderbird 3.1.6 cpe:2.3:a:mozilla:thunderbird:3.1.6
  Mozilla Thunderbird 3.1.7 cpe:2.3:a:mozilla:thunderbird:3.1.7
  Mozilla Thunderbird 3.1.8 cpe:2.3:a:mozilla:thunderbird:3.1.8
  Mozilla Thunderbird 3.1.9 cpe:2.3:a:mozilla:thunderbird:3.1.9

Configuration #3

    CPE23 From Up To
  Mozilla Firefox 4.0 cpe:2.3:a:mozilla:firefox:4.0
  Mozilla Firefox 4.0 Beta1 cpe:2.3:a:mozilla:firefox:4.0:beta1
  Mozilla Firefox 4.0 Beta10 cpe:2.3:a:mozilla:firefox:4.0:beta10
  Mozilla Firefox 4.0 Beta11 cpe:2.3:a:mozilla:firefox:4.0:beta11
  Mozilla Firefox 4.0 Beta12 cpe:2.3:a:mozilla:firefox:4.0:beta12
  Mozilla Firefox 4.0 Beta2 cpe:2.3:a:mozilla:firefox:4.0:beta2
  Mozilla Firefox 4.0 Beta3 cpe:2.3:a:mozilla:firefox:4.0:beta3
  Mozilla Firefox 4.0 Beta4 cpe:2.3:a:mozilla:firefox:4.0:beta4
  Mozilla Firefox 4.0 Beta5 cpe:2.3:a:mozilla:firefox:4.0:beta5
  Mozilla Firefox 4.0 Beta6 cpe:2.3:a:mozilla:firefox:4.0:beta6
  Mozilla Firefox 4.0 Beta7 cpe:2.3:a:mozilla:firefox:4.0:beta7
  Mozilla Firefox 4.0 Beta8 cpe:2.3:a:mozilla:firefox:4.0:beta8
  Mozilla Firefox 4.0 Beta9 cpe:2.3:a:mozilla:firefox:4.0:beta9
  Mozilla Firefox 4.0.1 cpe:2.3:a:mozilla:firefox:4.0.1