CVE-2007-2291

No fix known EPSS 20%

CRLF injection vulnerability in the Digest Authentication support for Microsoft Internet Explorer 7.0.5730.11 allows remote attackers to conduct HTTP response splitting attacks via a LF (%0a) in the username attribute.

Published 2007-04-26 · CVE record · OSV

Products: microsoft internet_explorer