{"schemaVersion":3,"id":"CVE-2005-2703","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.","dates":{"published":"2005-09-23T04:00:00.000Z","modified":"2024-08-07T22:45:02.243Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01789,"percentile":0.78032,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01789},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01789,"percentile":0.78032}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01789,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01789,"percentile":0.78032}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')","description":"The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/94.html"}],"affected":[{"vendor":"mozilla","product":"firefox","name":"firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.0.6","noFixRecorded":false,"fixedIn":null},{"text":"1.0","noFixRecorded":false,"fixedIn":null},{"text":"1.0.1","noFixRecorded":false,"fixedIn":null},{"text":"1.0.2","noFixRecorded":false,"fixedIn":null},{"text":"1.0.3","noFixRecorded":false,"fixedIn":null},{"text":"1.0.4","noFixRecorded":false,"fixedIn":null},{"text":"1.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.0.6 | 1.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"mozilla_suite","name":"mozilla suite","label":"mozilla_suite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.7.11","noFixRecorded":false,"fixedIn":null},{"text":"1.7.6","noFixRecorded":false,"fixedIn":null},{"text":"1.7.7","noFixRecorded":false,"fixedIn":null},{"text":"1.7.8","noFixRecorded":false,"fixedIn":null},{"text":"1.7.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.7.11 | 1.7.6 | 1.7.7 | 1.7.8 | 1.7.10","eol":null,"hubHref":"/vendor/mozilla/mozilla_suite"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:169","label":"www.mandriva.com/security/advisories?name=MDKSA-2005:169","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/22376","label":"exchange.xforce.ibmcloud.com/vulnerabilities/22376","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.debian.org/security/2005/dsa-868","label":"www.debian.org/security/2005/dsa-868","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.vupen.com/english/advisories/2005/1824","label":"www.vupen.com/english/advisories/2005/1824","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html","label":"www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1089","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1089","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://www.securityfocus.com/bid/15495","label":"www.securityfocus.com/bid/15495","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://securitytracker.com/id?1014954","label":"securitytracker.com/id?1014954","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-789.html","label":"www.redhat.com/support/errata/RHSA-2005-789.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/17026","label":"secunia.com/advisories/17026","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-791.html","label":"www.redhat.com/support/errata/RHSA-2005-791.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.ubuntu.com/usn/usn-200-1","label":"www.ubuntu.com/usn/usn-200-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/17042","label":"secunia.com/advisories/17042","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.debian.org/security/2005/dsa-866","label":"www.debian.org/security/2005/dsa-866","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.mozilla.org/security/announce/mfsa2005-58.html","label":"www.mozilla.org/security/announce/mfsa2005-58.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10767","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10767","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://secunia.com/advisories/17284","label":"secunia.com/advisories/17284","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/17149","label":"secunia.com/advisories/17149","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/17263","label":"secunia.com/advisories/17263","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/16917","label":"secunia.com/advisories/16917","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.debian.org/security/2005/dsa-838","label":"www.debian.org/security/2005/dsa-838","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://secunia.com/advisories/17014","label":"secunia.com/advisories/17014","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-785.html","label":"www.redhat.com/support/errata/RHSA-2005-785.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.novell.com/linux/security/advisories/2005_58_mozilla.html","label":"www.novell.com/linux/security/advisories/2005_58_mozilla.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:174","label":"www.mandriva.com/security/advisories?name=MDKSA-2005:174","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://secunia.com/advisories/17090","label":"secunia.com/advisories/17090","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/16911","label":"secunia.com/advisories/16911","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/16977","label":"secunia.com/advisories/16977","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/14923","label":"www.securityfocus.com/bid/14923","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:170","label":"www.mandriva.com/security/advisories?name=MDKSA-2005:170","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]}],"lineage":{"upstream":[],"downstream":["DSA-838-1","DSA-866-1","DSA-868-1","RHSA-2005:785","RHSA-2005:789","RHSA-2005:791"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2005-09-23T04:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T22:45:02.243Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":20,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T18:25:26.912Z","stale":false,"partial":false}}