CVE-2006-2786
Low
Description
HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via (1) invalid HTTP response headers with spaces between the header name and the colon, which might not be ignored in some cases, or (2) HTTP 1.1 headers through an HTTP 1.0 proxy, which are ignored by the proxy but processed by the client.
SeverityLow
CVSS2.6
Exploit probability—
Product
Mozilla Firefox
PublishedJun 2, 2006
First seenJun 2, 2006
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla firefox | v ≤ 1.5.0.3 | — |
| mozilla thunderbird | v ≤ 1.5.0.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.