CVE-2005-2703 Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in s...
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 1.0.6 | No fix listed |
| mozilla Firefox | = 1.0 | No fix listed |
| mozilla Firefox | = 1.0.1 | No fix listed |
| mozilla Firefox | = 1.0.2 | No fix listed |
| mozilla Firefox | = 1.0.3 | No fix listed |
| mozilla Firefox | = 1.0.4 | No fix listed |
| mozilla Firefox | = 1.0.5 | No fix listed |
| mozilla suite | <= 1.7.11 | No fix listed |
| mozilla suite | = 1.7.6 | No fix listed |
| mozilla suite | = 1.7.7 | No fix listed |
| mozilla suite | = 1.7.8 | No fix listed |
| mozilla suite | = 1.7.10 | No fix listed |
References
- 16911 third-party-advisory vendor-advisory
- 16917 third-party-advisory vendor-advisory
- 16977 third-party-advisory vendor-advisory
- 17014 third-party-advisory vendor-advisory
- 17026 third-party-advisory vendor-advisory
- 17042 third-party-advisory vendor-advisory
- 17090 third-party-advisory vendor-advisory
- 17149 third-party-advisory vendor-advisory
- 17263 third-party-advisory vendor-advisory
- 17284 third-party-advisory vendor-advisory
- 1014954 vdb-entry
- DSA-838 vendor-advisory
- DSA-866 vendor-advisory
- DSA-868 vendor-advisory
- MDKSA-2005:169 vendor-advisory
- MDKSA-2005:170 vendor-advisory
- MDKSA-2005:174 vendor-advisory
- www.mozilla.org
- SUSE-SA:2005:058 vendor-advisory
- FLSA-2006:168375 vendor-advisory
- RHSA-2005:785 vendor-advisory
- RHSA-2005:789 vendor-advisory
- RHSA-2005:791 vendor-advisory
- 14923 vdb-entry
- 15495 vdb-entry
- USN-200-1 vendor-advisory
- ADV-2005-1824 vdb-entry
- mozilla-xmlhttprequest-spoofing(22376) vdb-entry
- oval:org.mitre.oval:def:10767 signature vdb-entry
- oval:org.mitre.oval:def:1089 signature vdb-entry