Vulnérabilité · NVD

CVE-2011-3000

N/A Publié le 2011-09-29

EN Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting attacks via crafted header values.

EPSS 2.02% au-dessus de la médiane percentile 79.1%

Apps suivies liées à cette CVE

Pour chaque app : la plage affectée, la version qui corrige, et où en est l'app suivie aujourd'hui.

Mozilla Thunderbird Windows winget:Mozilla.Thunderbird

Affecté — Corrigé — Dernière suivie 153.0.2 indéterminé

Configurations CPE vulnérables (100)

Vendor	Produit	Plateforme	Versions	CPE 2.3 URI
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	≤6.0.2	cpe:2.3:a:mozilla:thunderbird::::::::
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.5:beta::::::
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5:beta2::::::
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.10:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.11:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.12:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.13:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.14:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.7.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.7.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.11:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.12:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.13:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.14:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.15:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.16:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.17:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.18:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.19:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.20:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.21:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.22:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.23:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_.12:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_.13:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_.14:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.10:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.11:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.10:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.11:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:5.0:::::::*

Voir sur NVD ↗ Advisory · www.mozilla.org