CVE-2005-2703

Firefox <1.0.7 & Mozilla Suite <1.7.12 - SSRF

Title source: llm
STIX 2.1

Description

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.

References (31)

Core 31
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/22376
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1089
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15495
Various Sources x_refsource_confirm
http://www.mozilla.org/security/announce/mfsa2005-58.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10767
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/14923
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-789.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-791.html
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2005:169
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2005/dsa-868
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/1824
Various Sources vendor-advisory x_refsource_sco
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1014954
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17026
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-200-1
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17042
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2005/dsa-866
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17284
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17149
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17263
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16917
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2005/dsa-838
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17014
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-785.html
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2005_58_mozilla.html
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2005:174
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17090
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16911
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16977
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2005:170

Scores

EPSS 0.0179
EPSS Percentile 75.7%

Details

CWE
CWE-94
Status published
Products (12)
mozilla/firefox 1.0
mozilla/firefox 1.0.1
mozilla/firefox 1.0.2
mozilla/firefox 1.0.3
mozilla/firefox 1.0.4
mozilla/firefox 1.0.5
mozilla/firefox < 1.0.6
mozilla/mozilla_suite 1.7.6
mozilla/mozilla_suite 1.7.7
mozilla/mozilla_suite 1.7.8
... and 2 more
Published Sep 23, 2005
Tracked Since Feb 18, 2026