CVE-2005-0233

N/A
Published: February 7, 2005 at 05:00 AM UTC
Updated: June 16, 2026 at 10:10 PM UTC
6 products affected across 3 vendorsFirefoxOpera BrowserMozilla

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 20%

Description

The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 1.7.6
Affected range stops below 1.7.6, so it looks safe — our inference, not a vendor statement

References (14)

Mailing Listx_refsource_FULLDISCBroken LinkExploitVendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html
Vendor Advisoryx_refsource_GENTOOExploitPatchThird Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml
Vendor Advisoryx_refsource_GENTOOExploitPatchThird Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml
x_refsource_CONFIRMExploitPatchThird Party AdvisoryVendor Advisory
http://www.mozilla.org/security/announce/mfsa2005-29.html
Vendor Advisoryx_refsource_REDHATBroken Link
http://www.redhat.com/support/errata/RHSA-2005-176.html
Vendor Advisoryx_refsource_REDHATBroken Link
http://www.redhat.com/support/errata/RHSA-2005-384.html

CVSS

Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card