CVE-2005-2703

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-09-23 · updated 2026-06-16
Weakness: CWE-94

Description

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.

Affected products

Mozilla Firefox: through 1.0.6; 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5
Mozilla Suite: through 1.7.11; 1.7.6, 1.7.7, 1.7.8, 1.7.10

References

http://secunia.com/advisories/16911
http://secunia.com/advisories/16917
http://secunia.com/advisories/16977
http://secunia.com/advisories/17014
http://secunia.com/advisories/17026
http://secunia.com/advisories/17042
http://secunia.com/advisories/17090
http://secunia.com/advisories/17149
http://secunia.com/advisories/17263
http://secunia.com/advisories/17284
http://securitytracker.com/id?1014954

Get alerted when CVE-2005-2703 or the next vulnerability affects your stack