Published: 08/02/2005 Updated: 28/02/2022

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla prior to 1.7.6 allows remote malicious users to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla camino 0.8.5
mozilla firefox 1.0
mozilla mozilla
omnigroup omniweb 5
opera opera browser
opera software opera web browser 7.54

Synopsis Mozilla security update Type/Severity Security Advisory: Important Topic Updated Mozilla packages that fix various security bugs are now availableThis update has been rated as having Important security impact by the RedHat Security Response Team Description Mozilla is an open sou ...

Synopsis firefox security update Type/Severity Security Advisory: Critical Topic Updated firefox packages that fix various bugs are now availableThis update has been rated as having critical security impact by the RedHat Security Response Team Description Mozilla Firefox is an open source ...

USN-149-1 fixed some vulnerabilities in the Ubuntu 504 (Hoary Hedgehog) version of Firefox The version shipped with Ubuntu 410 (Warty Warthog) is also vulnerable to these flaws, so it needs to be upgraded as well Please see ...

NVD-CWE-noinfo http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html http://www.shmoo.com/idn http://www.shmoo.com/idn/homograph.txt http://www.mozilla.org/security/announce/mfsa2005-29.html http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html http://www.redhat.com/support/errata/RHSA-2005-176.html http://www.redhat.com/support/errata/RHSA-2005-384.html http://www.securityfocus.com/bid/12461 http://marc.info/?l=bugtraq&m=110782704923280&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11229 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100029 https://access.redhat.com/errata/RHSA-2005:384 https://usn.ubuntu.com/149-3/https://nvd.nist.gov

CVE-2005-0233

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect