Vulnerability · NVD

CVE-2011-3000

N/A Published on 2011-09-29

Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting attacks via crafted header values.

EPSS 2.02% above median percentile 79.1%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Mozilla Thunderbird Windows winget:Mozilla.Thunderbird

Affected — Fixed in — Latest tracked 153.0.2 undetermined

Vulnerable CPE configurations (100)

Vendor	Product	Platform	Versions	CPE 2.3 URI
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	≤6.0.2	cpe:2.3:a:mozilla:thunderbird::::::::
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.4:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.6:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.8:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.9:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.4:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.5:beta::::::
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.6:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.7:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.8:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5:beta2::::::
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.4:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.6:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.7:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.8:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.9:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.10:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.11:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.12:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.13:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.14:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.7.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.7.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.0:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.4:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.6:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.7:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.8:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.9:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.11:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.12:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.13:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.14:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.15:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.16:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.17:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.18:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.19:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.20:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.21:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.22:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.23:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_.4:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_.6:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_.9:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_.12:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_.13:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_.14:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0_8:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.4:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.6:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.7:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.8:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.9:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.10:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.11:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.4:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.6:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.7:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.8:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.9:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.10:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.11:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:5.0:::::::*

View on NVD ↗ Advisory · www.mozilla.org