← Database

CVE-2007-2291

HIGH CVSS: 7.5 Published: 2007-04-26 Modified: 2026-06-16

Description

CRLF injection vulnerability in the Digest Authentication support for Microsoft Internet Explorer 7.0.5730.11 allows remote attackers to conduct HTTP response splitting attacks via a LF (%0a) in the username attribute.

Affected Platforms

Microsoft Internet Explorer

Weakness Type

NVD-CWE-Other

References