Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-mozillaUpgrade ja-netscape7Upgrade mozillaUpgrade linux-mozilla-develUpgrade zhTW-linux-mozillafirebirdUpgrade linux-firefoxUpgrade mozilla-gtk2Upgrade de-linux-mozillafirebirdUpgrade pt_BR-netscape7Upgrade de-netscape7Upgrade mozilla-gtk1Upgrade zhCN-linux-mozillafirebirdUpgrade fr-netscape7Upgrade ja-linux-netscapeUpgrade mozilla+ipv6Upgrade de-linux-netscapeUpgrade ja-linux-mozillafirebird-gtk1Upgrade ru-linux-mozillafirebirdUpgrade mozilla-embeddedUpgrade mozilla-gtkUpgrade linux-phoenixUpgrade linux-netscapeUpgrade firefoxUpgrade el-linux-mozillafirebirdUpgrade mozilla-firebirdUpgrade fr-linux-netscapeUpgrade mozilla-thunderbirdUpgrade linux-mozillafirebirdUpgrade ja-mozillafirebird-gtk2Upgrade phoenixUpgrade netscape7 | Dec 10, 2025 | Sep 23, 2005 |
| Gentoo Linux | — | Upgrade net-libs/gecko-sdk.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-bin. | Oct 30, 2017 | Sep 23, 2005 |
| Mfsa2005 58 | — | Upgrade to Mozilla Firefox version 1.0.7Upgrade to the latest version of Mozilla Firefox | Sep 28, 2005 | Sep 23, 2005 |
| Suse | — | Upgrade mozilla-jaUpgrade mozilla-develUpgrade mozilla-huUpgrade mozilla-koUpgrade mozilla-mailUpgrade mozilla-venkmanUpgrade mozilla-ircUpgrade mozilla-deatUpgrade mozilla-csUpgrade mozilla-calendarUpgrade mozillaUpgrade mozilla-dom-inspector | Feb 17, 2015 | Sep 23, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub