babilonics.com

Google AdWords is vulnerable to a new form of application attack technique called HTTP Respons splitting (aka CRLF Injection). HTTP Response Splitting enables an attacker to alter the HTTP response header structure which can leads to various range of attacks such as web cache poisoning, temporary defacement, hijacking pages or cross-site scripting (XSS). This happens since the user input is injected into the value section of http header without properly escaping/removing CRLF characters
which can leads to two HTTP responses instead of one response.

authors:
http://hackingspirits.com/vuln-rnd/vuln-rnd.html