Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-0233

The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

Published

2005-02-08T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

6.4

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	mozilla	camino	0.8.5	Yes
Application	mozilla	firefox	1.0	Yes
Application	mozilla	mozilla	< 1.7.6	Yes
Application	omnigroup	omniweb	5	Yes
Application	opera	opera_browser	≤ 7.54	Yes
Application	opera_software	opera_web_browser	7.54	Yes

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html Broken Link, Exploit, Vendor Advisory ([email protected])
http://marc.info/?l=bugtraq&m=110782704923280&w=2 Mailing List ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml Exploit, Patch, Third Party Advisory, Vendor Advisory ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml Exploit, Patch, Third Party Advisory, Vendor Advisory ([email protected])
http://www.mozilla.org/security/announce/mfsa2005-29.html Exploit, Patch, Third Party Advisory, Vendor Advisory ([email protected])
http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html Broken Link, Exploit, Patch, Vendor Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2005-176.html Broken Link ([email protected])
http://www.redhat.com/support/errata/RHSA-2005-384.html Broken Link ([email protected])
http://www.securityfocus.com/bid/12461 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://www.shmoo.com/idn Broken Link, Exploit, Vendor Advisory ([email protected])
http://www.shmoo.com/idn/homograph.txt Broken Link, Exploit, Vendor Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 Third Party Advisory, VDB Entry ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100029 Tool Signature ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11229 Tool Signature ([email protected])
http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html Broken Link, Exploit, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=110782704923280&w=2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml Exploit, Patch, Third Party Advisory, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml Exploit, Patch, Third Party Advisory, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.mozilla.org/security/announce/mfsa2005-29.html Exploit, Patch, Third Party Advisory, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html Broken Link, Exploit, Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2005-176.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2005-384.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/12461 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.shmoo.com/idn Broken Link, Exploit, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.shmoo.com/idn/homograph.txt Broken Link, Exploit, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100029 Tool Signature (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11229 Tool Signature (af854a3a-2127-422b-91ae-364da2661108)