CVE-2005-0233
NoneCVSS
—
EPSS
20.4%
Published
Feb 8, 2005
CISA due date
—
The record
The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:1.0.1-1.4.3 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:1.0.1-1.4.3 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:1.0.1-1.4.3 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:1.0.1-1.4.3 |
Related vulnerabilities
- CVE-2011-3026 Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote… Also affects firefox
- CVE-2011-3659 Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0… Also affects firefox
- CVE-2011-2371 Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x… Also affects firefox
- CVE-2011-0073 Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does… Also affects firefox
- CVE-2011-0065 Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17… Also affects firefox
- CVE-2010-3765 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before… Also affects firefox
- CVE-2010-3179 Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before… Also affects firefox
- CVE-2010-1205 Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in… Also affects firefox