Lucene search
Mozilla FoundationMFSA2013-61HistoryJun 25, 2013 - 12:00 a.m.
Homograph domain spoofing in .com, .net and .name — Mozilla
2013-06-2500:00:00
Mozilla Foundation
www.mozilla.org
18
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
73.1%
Security researcher 3ric Johanson reported in discussions with Richard Newman and Holt Sorenson that Verisign’s prevention measures for homograph attacks using Internationalized Domain Names (IDN) were insufficiently rigorous, and this led to a limited possibility for domain spoofing in Firefox.
Affected configurations
Node
mozillafirefoxRange<22
ORmozillaseamonkeyRange<2.19
Related
ubuntucve
ubuntucve
CVE-2013-1699
2013-06-25 00:00:00
nvd
nvd
CVE-2013-1699
2013-06-26 03:19:10
cvelist
cvelist
CVE-2013-1699
2013-06-26 01:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-61) - Linux
2021-11-11 00:00:00
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2013:1142-1)
2013-11-19 00:00:00
Ubuntu Update for firefox USN-1890-2
2013-07-05 00:00:00
prion
prion
Code injection
2013-06-26 03:19:00
cve
cve
CVE-2013-1699
2013-06-26 03:19:10
nessus
nessus
Firefox < 22.0 Multiple Vulnerabilities (Mac OS X)
2013-06-26 00:00:00
Thunderbird < 17.0.7 Multiple Vulnerabilities (Mac OS X)
2013-06-26 00:00:00
Ubuntu 12.04 LTS / 12.10 / 13.04 : firefox vulnerabilities (USN-1890-1)
2013-06-27 00:00:00
ubuntu
ubuntu
Firefox regression
2013-07-03 00:00:00
Firefox vulnerabilities
2013-06-26 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-06-25 00:00:00
suse
suse
MozillaFirefox: Update to Firefox 22.0 release (important)
2013-07-04 12:04:29
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-07-01 00:00:00
mageia
mageia
Updated iceape packages fix many vulnerabilities
2013-11-21 00:16:49
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
73.1%
Related for MFSA2013-61