DescriptionMozilla Firefox 1.5.x before 220.127.116.11 and 2.x before 18.104.22.168, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption, or (2) an internal delimiter within cookie path or name values, which could trigger a misinterpretation of cookie data, aka "Path Abuse in Cookies."
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
|National Vulnerability Database|
SUSE Security Advisories:
- SUSE-SA:2007:036, published Wed, 27 Jun 2007 15:00:00 +0000
SUSE Timeline for this CVECVE page created: Fri Jun 28 02:39:00 2013
CVE page last modified: Fri Oct 7 12:45:36 2022