VDB
CVE-2005-2703
CVE-2005-2703
PUBLISHED
CVSS 5 MEDIUM
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.
EPSS 1.79% · 78.2th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
1.79%
78.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| mozilla | mozilla_suite | 0, 1.7.6, 1.7.7 |
| mozilla | firefox | 1.0.4, 1.0.5, 0 |
Timeline
- Sep 23, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 30, 2023 EPSS Score
- Sep 14, 2023 EPSS Score
References
- FLSA-2006:168375 vendor-advisory
- RHSA-2005:789 vendor-advisory
- oval:org.mitre.oval:def:10767 vdb
- 17149 third-party-advisory
- DSA-838 vendor-advisory
- MDKSA-2005:174 vendor-advisory
- 14923 vdb
- 15495 vdb
- 1014954 vdb
- USN-200-1 vendor-advisory
- DSA-866 vendor-advisory
- 17284 third-party-advisory
- RHSA-2005:785 vendor-advisory
- SUSE-SA:2005:058 vendor-advisory
- http://secunia.com/advisories/16977 advisory
- http://secunia.com/advisories/17014 advisory
- http://secunia.com/advisories/17263 advisory
- http://www.vupen.com/english/advisories/2005/1824 technical
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22376 technical
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1089 technical
…and 12 more