CVE-2008-1368: Microsoft Internet Explorer

Medium severity, CVSS 4.3. EPSS: 11.3% chance of exploitation in the next 30 days.

CRLF injection vulnerability in Microsoft Internet Explorer 5 and 6 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded CRLF (%0D%0A) before the FTP command, which causes the commands to be inserted into an authenticated FTP connection established earlier in the same browser session, as demonstrated using a DELE command, a variant or possibly a regression of CVE-2004-1166. NOTE: a trailing "//" can force Internet Explorer to try to reuse an existing authenticated connection.

Affected products

• Microsoft Internet Explorer: version 5 only; version 6 only

Published 2008-03-18. Last modified 2026-06-16.