RCE in Mozilla Firefox

CVE-2008-0417

CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the user's password store via newlines that are not properly handled when the user saves a password.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.014 (70.4th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References