CVE-2011-3000

CVE-2011-3000 describes a vulnerability in Mozilla Firefox, Thunderbird, and SeaMonkey where the browsers improperly handle HTTP responses containing multiple Location, Content-Length, or Content-Disposition headers. This flaw facilitates HTTP response splitting attacks, allowing remote attackers to inject crafted header values. The vulnerability has a CVSS score of 4.3, indicating a medium attack complexity and potential for partial integrity impact, but no confidentiality or availability impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.