CVE 描述

CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.

CVE 資訊

EPSS

EPSS 是一種預測漏洞被利用可能性的評分模型。

EPSS 評分

EPSS 模型產生介於 0 到 1（0% 到 100%）之間的概率分數。分數越高，漏洞被利用的概率越大。

EPSS 百分位數

百分位數用於根據 EPSS 分數對 CVE 進行排名。例如，EPSS 評分在第 95 百分位的 CVE 比 95% 的其他 CVE 更有可能被利用。因此，百分位數用於比較某 CVE 的 EPSS 分數與其他 CVE 的相對位置。

EPSS First.org

參考資料

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.securityfocus.com/archive/1/482876/100/200/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.wisec.it/vulns.php?id=11
Tags : x_refsource_MISC

http://www.securitytracker.com/id?1017968
Tags : vdb-entry, x_refsource_SECTRACK

http://www.vupen.com/english/advisories/2007/3587
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/27414
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/archive/1/482925/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

https://issues.rpath.com/browse/RPL-1858
Tags : x_refsource_CONFIRM

http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://secunia.com/advisories/27360
Tags : third-party-advisory, x_refsource_SECUNIA

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/27298
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/27315
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/27327
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2007/3544
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/27276
Tags : third-party-advisory, x_refsource_SECUNIA

https://usn.ubuntu.com/535-1/
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.debian.org/security/2007/dsa-1401
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.debian.org/security/2007/dsa-1392
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.redhat.com/support/errata/RHSA-2007-0980.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/27383
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.novell.com/linux/security/advisories/2007_57_mozilla.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/27356
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.redhat.com/support/errata/RHSA-2007-0981.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.vupen.com/english/advisories/2008/0083
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/27387
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/bid/23668
Tags : vdb-entry, x_refsource_BID

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/27403
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/27336
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.debian.org/security/2007/dsa-1396
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.mozilla.org/security/announce/2007/mfsa2007-31.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/27425
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/28398
Tags : third-party-advisory, x_refsource_SECUNIA

https://exchange.xforce.ibmcloud.com/vulnerabilities/33981
Tags : vdb-entry, x_refsource_XF

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10195
Tags : vdb-entry, signature, x_refsource_OVAL

http://secunia.com/advisories/27311
Tags : third-party-advisory, x_refsource_SECUNIA

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/27325
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202
Tags : vendor-advisory, x_refsource_MANDRIVA

http://secunia.com/advisories/27665
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.redhat.com/support/errata/RHSA-2007-0979.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.securityfocus.com/archive/1/466906/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://secunia.com/advisories/27335
Tags : third-party-advisory, x_refsource_SECUNIA

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/27480
Tags : third-party-advisory, x_refsource_SECUNIA

https://bugzilla.mozilla.org/show_bug.cgi?id=378787
Tags : x_refsource_MISC

http://secunia.com/advisories/27680
Tags : third-party-advisory, x_refsource_SECUNIA

http://securityreason.com/securityalert/2654
Tags : third-party-advisory, x_refsource_SREASON

http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html
Tags : x_refsource_CONFIRM

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.securityfocus.com/archive/1/482932/100/200/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.ubuntu.com/usn/usn-536-1
Tags : vendor-advisory, x_refsource_UBUNTU

日期	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	28.33%	–	–
2022-04-03	–	–	28.33%	–	–
2023-03-12	–	–	–	0.81%	–
2023-05-07	–	–	–	0.88%	–
2023-06-11	–	–	–	2.06%	–
2023-07-16	–	–	–	2.21%	–
2023-10-01	–	–	–	4.26%	–
2023-11-12	–	–	–	3.69%	–
2023-12-17	–	–	–	3.54%	–
2024-01-21	–	–	–	1.66%	–
2024-02-11	–	–	–	1.66%	–
2024-03-03	–	–	–	3.01%	–
2024-04-07	–	–	–	7.25%	–
2024-06-02	–	–	–	6.06%	–
2024-06-23	–	–	–	5.68%	–
2024-08-04	–	–	–	8.94%	–
2024-12-22	–	–	–	1.32%	–
2025-01-05	–	–	–	1.58%	–
2025-01-19	–	–	–	1.58%	–
2025-03-18	–	–	–	–	1.54%
2025-06-02	–	–	–	–	1.54%
2025-06-03	–	–	–	–	1.54%
2025-07-01	–	–	–	–	1.54%
2025-11-18	–	–	–	–	1.54%
2025-11-21	–	–	–	–	1.54%
2025-12-13	–	–	–	–	1.57%
2026-02-22	–	–	–	–	1.96%
2026-03-29	–	–	–	–	1.82%
2026-05-31	–	–	–	–	2.22%

日期	百分位
2022-02-06	96%
2022-04-03	97%
2023-03-12	79%
2023-05-07	8%
2023-06-11	87%
2023-07-16	88%
2023-10-01	91%
2023-11-12	91%
2023-12-17	91%
2024-01-21	86%
2024-02-11	87%
2024-03-03	91%
2024-04-07	94%
2024-06-02	94%
2024-06-23	93%
2024-08-04	95%
2024-12-22	86%
2025-01-05	87%
2025-01-19	87%
2025-03-18	8%
2025-06-02	81%
2025-06-03	8%
2025-07-01	81%
2025-11-18	8%
2025-11-21	81%
2025-12-13	81%
2026-02-22	83%
2026-03-29	83%
2026-05-31	85%

CVE-2007-2292

CVE 描述

CVE 資訊

相關弱點

指標

EPSS

EPSS 評分

EPSS 百分位數

相關產品

設定 0

參考資料

CVE-2007-2292：詳細資料

CVE-2007-2292

CVE 描述

CVE 資訊

相關弱點

指標

EPSS

EPSS 評分

EPSS 百分位數

相關產品

設定 0

參考資料