← Vulnerability feed

Vulnerability record · CVE-2007-2292 · published 26 April 2007

CVE-2007-2292: Microsoft internet explorer improper input validation vulnerability

Microsoft · Internet Explorer

CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.

4.3 CVSS 2.0 Medium EPSS 13% · top 3.9% CWE-20 · Improper input validation
4.3CVSS 2.0 base score
13%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
104References
16 Jun 2026Last modified by NVD

Description

CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
http://secunia.com/advisories/27276 Vendor Advisory
http://secunia.com/advisories/27298 Vendor Advisory
http://secunia.com/advisories/27311 Vendor Advisory
http://secunia.com/advisories/27315 Vendor Advisory
http://secunia.com/advisories/27325 Vendor Advisory
http://secunia.com/advisories/27327 Vendor Advisory
http://secunia.com/advisories/27335 Vendor Advisory
http://secunia.com/advisories/27336 Vendor Advisory
http://secunia.com/advisories/27356 Vendor Advisory
http://secunia.com/advisories/27360
http://secunia.com/advisories/27383 Vendor Advisory
http://secunia.com/advisories/27387 Vendor Advisory
http://secunia.com/advisories/27403 Vendor Advisory
http://secunia.com/advisories/27414 Vendor Advisory
http://secunia.com/advisories/27425 Vendor Advisory
http://secunia.com/advisories/27480 Vendor Advisory
http://secunia.com/advisories/27665 Vendor Advisory
http://secunia.com/advisories/27680
http://secunia.com/advisories/28398
http://securityreason.com/securityalert/2654
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1
http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html
http://www.debian.org/security/2007/dsa-1392
http://www.debian.org/security/2007/dsa-1396
http://www.debian.org/security/2007/dsa-1401
http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml
http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202
http://www.mozilla.org/security/announce/2007/mfsa2007-31.html
http://www.novell.com/linux/security/advisories/2007_57_mozilla.html
http://www.redhat.com/support/errata/RHSA-2007-0979.html
http://www.redhat.com/support/errata/RHSA-2007-0980.html
http://www.redhat.com/support/errata/RHSA-2007-0981.html
http://www.securityfocus.com/archive/1/466906/100/0/threaded
http://www.securityfocus.com/archive/1/482876/100/200/threaded
http://www.securityfocus.com/archive/1/482925/100/0/threaded
http://www.securityfocus.com/archive/1/482932/100/200/threaded
http://www.securityfocus.com/bid/23668
http://www.securitytracker.com/id?1017968
http://www.ubuntu.com/usn/usn-536-1

Track CVE-2007-2292 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2019-11708Mozilla Firefox and Thunderbird sandbox escape via Prompt:Open IPC validation flawThe Prompt:Open IPC message between child and parent processes does not sufficiently vet its parameters, letting a compromised child process cause th…KEVEPSS 56%analysed9.8CVE-2024-9680Mozilla Firefox and Thunderbird use-after-free in Animation timelinesA use-after-free flaw in Animation timelines allows an attacker to execute code in the content process of Firefox and Thunderbird. Mozilla reports ex…KEVEPSS 23%analysed9.8CVE-2015-0313Adobe Flash Player use-after-free allows remote code executionAdobe Flash Player contains a use-after-free (CWE-416) flaw reachable through unspecified vectors. It affects Flash Player before 13.0.0.269 and 14.x…KEVEPSS 95%analysed9.8CVE-2015-0311Adobe Flash Player unspecified flaw allows remote code executionCVE-2015-0311 is an unspecified vulnerability in Adobe Flash Player affecting versions through 13.0.0.262, 14.x, 15.x, and 16.x through 16.0.0.287 on…KEVEPSS 86%analysed9.8CVE-2014-1776Internet Explorer use-after-free in CMarkup::IsConnectedToPrimaryMarkupMicrosoft Internet Explorer 6 through 11 contains a use-after-free in the CMarkup::IsConnectedToPrimaryMarkup function that allows remote code execut…KEVEPSS 83%analysed9.8CVE-2010-3765Mozilla Firefox, Thunderbird and SeaMonkey memory corruption via appendChildA memory corruption flaw in Mozilla Firefox, Thunderbird and SeaMonkey arises from incorrect index tracking in nsCSSFrameConstructor::ContentAppended…KEVEPSS 83%analysed9.6CVE-2022-26486Firefox WebGPU IPC use-after-free enables sandbox escapeAn unexpected message in the WebGPU IPC framework triggers a use-after-free in Mozilla Firefox, Firefox ESR, Firefox for Android, Thunderbird and Foc…KEVEPSS 2.3%analysed8.8CVE-2023-5217libvpx VP8 encoding heap buffer overflow exploited via crafted HTMLA heap buffer overflow in the VP8 encoder in libvpx affects Google Chrome before 117.0.5938.132 and libvpx 1.13.1, and is reachable through a crafted…KEVEPSS 49%analysed

Source: NIST National Vulnerability Database (record CVE-2007-2292), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.