Dolske

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 3.6.2 **Description** The issue arises from the asynchronous Authorization Prompt implementation in the password manager component, which fails to properly handle concurrent authorization requests from multiple websites. This could potentially allow remote web servers to spoof an authorization dialog, enabling them to capture user credentials by demanding HTTP authentication under certain circumstances. **Recommendations** For versions prior to 3.6.2, update to version 3.6.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 2.0.0.12 **Description** A CRLF injection issue allows remote user-assisted web sites to corrupt the user's password store by not properly handling newlines when the user saves a password. **Recommendations** For versions prior to 2.0.0.12, update to version 2.0.0.12 or later to resolve the issue.