791 matches found
CVE-2013-1699
The Internationalized Domain Name IDN display algorithm in Mozilla Firefox before 22.0 does not properly handle the .com, .name, and .net top-level domains, which allows remote attackers to spoof the address bar via unspecified homograph characters...
Slackware Advisory SSA:2005-269-01 Mozilla/Firefox
The remote host is missing an update as announced via advisory SSA:2005-269-01. OpenVAS Vulnerability Test $Id: esoftslkssa200526901.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64
Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox. CVE-2009-1392, CVE-2009-1832, CVE-2009-1833, CVE-2009-1837, CVE-2009-1838, CVE-2009-1841...
CVE-2012-3693
Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unicode fonts to construct unspecified homoglyphs...
Design/Logic Flaw
Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unicode fonts to construct unspecified homoglyphs...
CVE-2012-3693
CVE-2012-3693 affects WebKit in Safari (iOS/macOS) where IDN/Unicode font look‑alike characters could render a spoofed URL in the address bar, enabling phishing-like deception. Impact is spoofing risk rather than code execution; Apple’s update to Safari 6.0 (and iOS 6) addresses the issue by upda...
CVE-2012-3693
Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unicode fonts to construct unspecified homoglyphs...
CVE-2012-0584
The Internationalized Domain Name IDN feature in Apple Safari before 5.1.4 on Windows does not properly restrict the characters in URLs, which allows remote attackers to spoof a domain name via unspecified homoglyphs...
CVE-2012-0584
CVE-2012-0584 affects Apple Safari on Windows prior to 5.1.4. The IDN handling in URLs does not properly restrict characters, enabling a remote attacker to spoof a domain name via homoglyphs. The vulnerability is tied to the browser’s internationalized domain name (IDN) feature in Safari, allowin...
CentOS Update for firefox CESA-2009:1095 centos5 i386
Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2009:1095 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Opera Browser Multiple Vulnerabilities july-10 (Win02)
The host is installed with Opera web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnwin02july10.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera Browser Multiple Vulnerabilities july-10 Win02 Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...
CVE-2010-2660
Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains via unspecified choices of characters...
Code injection
Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains via unspecified choices of characters...
CVE-2010-2660
Opera before 10.54 on Windows/Mac and before 10.60 on UNIX suffers from improper restriction of certain homograph characters in domain names, enabling remote attackers to spoof IDN domains. Root cause: inadequate validation of characters used in domain names. Impact: possible spoofing of the addr...
CVE-2010-2660
Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains via unspecified choices of characters...
MDVA-2010:117 : flashplayer
Dependency problems was discovered on Mandriva Linux 2009.0 Powerpack x8664 which prevented the flashplayer and libsmbclient0 packages to install smoothly using MandrivaUpdate. This advisory provides the missing packages. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...
Mozilla Products IDN Spoofing (CVE-2005-0233)
The Internationalized Domain Names IDN standard defines specifications for the representation of domain names containing non-ASCII characters. The IDN standard has been developed to allow representation of Unicode domain names without depending on alterations to any network infrastructure...
Firefox Domain Name Handling Buffer Overflow (CVE-2005-2871)
The Internationalized Domain Names IDN standard defines specifications for the representation of domain names containing non-ASCII characters. The IDN standard has been developed to allow representation of Unicode domain names without depending on alterations to any network infrastructure...
Opera Multiple URL Spoofing Vulnerabilities - Sep09 (Windows)
This host is installed with Opera Web Browser and is prone to Multiple Spoof URL vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamulturlspoofvulnsep09win.nasl 4869 2016-12-29 11:01:45Z teissa $ Opera Multiple URL Spoofing Vulnerabilities - Sep09 Windows Authors: Sharath S Copyright:...
Opera Multiple URL Spoofing Vulnerabilities (Sep 2009) - Linux
Opera Web Browser is prone to Multiple Spoof URL vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...