CVE-2005-0233
Publicada el · Actualizada el
8Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 20%
probabilidad de explotación
20%top 3% de las CVE
explotación observada
noninguna fuente lo reporta
The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Productos afectados
n/a · n/aReferencias
http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.htmlhttp://marc.info/?l=bugtraq&m=110782704923280&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/19236https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100029https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11229http://www.gentoo.org/security/en/glsa/glsa-200503-10.xmlhttp://www.gentoo.org/security/en/glsa/glsa-200503-30.xmlhttp://www.mozilla.org/security/announce/mfsa2005-29.htmlhttp://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.htmlhttp://www.redhat.com/support/errata/RHSA-2005-176.htmlhttp://www.redhat.com/support/errata/RHSA-2005-384.htmlhttp://www.securityfocus.com/bid/12461