CVE-2005-0233

2005-02-0805:00:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2005-0233

international domain name

firefox

camino

mozilla

remote attack

spoofing

phishing

6.2 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.957 High

EPSS

Percentile

99.4%

JSON

The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

CPENameOperatorVersion
opera_software:opera_web_browseropera software opera web browsereq7.54
mozilla:firefoxmozilla firefoxeq1.0
mozilla:caminomozilla caminoeq0.8.5
omnigroup:omniwebomnigroup omniwebeq5
opera:opera_browseropera opera browserle7.54
mozilla:mozillamozillalt1.7.6

CPE	Name	Operator	Version
opera_software:opera_web_browser	opera software opera web browser	eq	7.54
mozilla:firefox	mozilla firefox	eq	1.0
mozilla:camino	mozilla camino	eq	0.8.5
omnigroup:omniweb	omnigroup omniweb	eq	5
opera:opera_browser	opera opera browser	le	7.54
mozilla:mozilla	mozilla	lt	1.7.6