Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozilla-thunderbirdUpgrade firefoxUpgrade mozilla-gtkUpgrade ja-mozillafirebird-gtk2Upgrade linux-netscapeUpgrade linux-phoenixUpgrade mozilla-embeddedUpgrade phoenixUpgrade linux-mozillafirebirdUpgrade ru-linux-mozillafirebirdUpgrade mozilla+ipv6Upgrade de-linux-netscapeUpgrade ja-linux-mozillafirebird-gtk1Upgrade el-linux-mozillafirebirdUpgrade fr-linux-netscapeUpgrade mozilla-firebirdUpgrade netscape7Upgrade linux-mozilla-develUpgrade linux-mozillaUpgrade mozillaUpgrade mozilla-gtk1Upgrade zhTW-linux-mozillafirebirdUpgrade pt_BR-netscape7Upgrade linux-firefoxUpgrade mozilla-gtk2Upgrade ja-linux-netscapeUpgrade de-netscape7Upgrade zhCN-linux-mozillafirebirdUpgrade de-linux-mozillafirebirdUpgrade fr-netscape7Upgrade ja-netscape7 | Dec 10, 2025 | Sep 23, 2005 |
| Gentoo Linux | — | Upgrade net-libs/gecko-sdk.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla.Upgrade www-client/mozilla-bin.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Sep 23, 2005 |
| Mfsa2005 58 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 1.0.7 | Sep 28, 2005 | Sep 23, 2005 |
| Suse | — | Upgrade mozilla-calendarUpgrade mozilla-dom-inspectorUpgrade mozillaUpgrade mozilla-csUpgrade mozilla-huUpgrade mozilla-venkmanUpgrade mozilla-ircUpgrade mozilla-deatUpgrade mozilla-develUpgrade mozilla-mailUpgrade mozilla-koUpgrade mozilla-ja | Feb 17, 2015 | Sep 23, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub