PT-2006-3705 · Mozilla+1 · Firefox+2
Kazuho Oku
·
Publicado
2006-06-02
·
Atualizado
2018-10-18
·
CVE-2006-2786
CVSS v2.0
2.6
Baixa
| Vetor | AV:N/AC:H/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 1.5.0.4
Mozilla Thunderbird versions prior to 1.5.0.4
Description
The issue allows remote attackers to cause the browser to interpret certain responses as if they were responses from two different sites. This can occur via invalid HTTP response headers with spaces between the header name and the colon, or through HTTP 1.1 headers sent via an HTTP 1.0 proxy. The proxy ignores these headers, but the client processes them.
Recommendations
For Mozilla Firefox versions prior to 1.5.0.4, update to version 1.5.0.4 or later.
For Mozilla Thunderbird versions prior to 1.5.0.4, update to version 1.5.0.4 or later.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Firefox
Thunderbird
Red Hat