CI vulnerability in Mozilla products

Description

Improper interpretation of HTTP headers was found in Mozilla products. By exploiting this vulnerability malicious users can inject cookie. This vulnerability can be exploited via specially designed HTTP headers.

Original advisories

• MFSA

Related products

• Mozilla-Firefox
• Mozilla-Thunderbird
• Mozilla-SeaMonkey
• Mozilla-Firefox-ESR

CVE list

• CVE-2014-8639
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com