AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2011-2605

MEDIUM · CVSS 4.3 EPSS 1.03%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2011-06-30 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2011-2605
Severity
MEDIUM
CVSS
4.3
EPSS
1.03%
Firefox Java

Original Filing — NVD Description

CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing a \n (newline) character, which is not properly handled in a JavaScript "document.cookie =" expression, a different vulnerability than CVE-2011-2374.