Published: 11/06/2018 Updated: 25/06/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the non-Latin character with some font sets on the addressbar. The non-Latin character will not be visible to most viewers. This allows for domain spoofing attacks because these combined domain names do not display as punycode. This vulnerability affects Firefox < 57.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

USN-3477-1 caused a regression in Firefox ...

USN-3477-1 caused some minor regressions in Firefox ...

USN-3477-1 caused a regression in Firefox ...

Mozilla Foundation Security Advisory 2017-24 Security vulnerabilities fixed in Firefox 57 Announced November 14, 2017 Impact critical Products Firefox Fixed in Firefox 57 ...

Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the non-Latin character with some font sets on the addressbar of Firefox before 570 The non-Latin character will not be visible to most viewers This allows for domain spoofing attacks because these combined domain names do not display ...

CWE-20 https://www.mozilla.org/security/advisories/mfsa2017-24/https://bugzilla.mozilla.org/show_bug.cgi?id=1370497 http://www.securitytracker.com/id/1039803 http://www.securityfocus.com/bid/101832 https://nvd.nist.gov https://usn.ubuntu.com/3477-1/

CVE-2017-7833

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect