← Database

CVE-2008-0417

MEDIUM CVSS: 4.3 Published: 2008-02-08 Modified: 2026-06-16

Description

CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the user's password store via newlines that are not properly handled when the user saves a password.

Affected Platforms

Mozilla Firefox

Weakness Type

CWE-94

References