CVEvulnerability

CVE-2005-2703

5.0 MEDIUM Published 2005-09-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-09-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-94

Description

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.

Affected configurations

• mozilla firefox (<= 1.0.6) • mozilla firefox 1.0 • mozilla firefox 1.0.1 • mozilla firefox 1.0.2 • mozilla firefox 1.0.3 • mozilla firefox 1.0.4 • mozilla firefox 1.0.5 • mozilla mozilla suite (<= 1.7.11) • mozilla mozilla suite 1.7.6 • mozilla mozilla suite 1.7.7 • mozilla mozilla suite 1.7.8 • mozilla mozilla suite 1.7.10

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References