CVE-2008-0417: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the user's password store via newlines that are not properly handled when the user saves a password.

Affected products

• Mozilla Firefox: up to and including 2.0.0.11

Published 2008-02-08. Last modified 2026-06-16.