991 matches found
CVE-2009-1834
Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the \u115A through...
Firefox < 3.0.11 Multiple Vulnerabilities
The installed version of Firefox is earlier than 3.0.11. Such versions are potentially affected by the following security issues : - Multiple memory corruption vulnerabilities could potentially be exploited to execute arbitrary code. MFSA 2009-24 - Certain invalid Unicode characters, when used as...
Critical: Red Hat Security Advisory: firefox security update
Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...
URL spoofing with invalid unicode characters — Mozilla
Mozilla add-on developer Pavel Cvrcek reported that certain invalid unicode characters, when used as part of an IDN, are displayed as whitespace in the location bar. This whitespace could be used to force part of the URL out of view in the location bar. An attacker could use this vulnerability to...
URL spoofing with box drawing character — Mozilla
Bjoern Hoehrmann and security researcher Moxie Marlinspike independently reported that Unicode box drawing characters were allowed in Internationalized Domain Names IDN where they could be visually confused with punctuation used in valid web addresses. This could be combined with a phishing-type...
SeaMonkey < 1.1.15 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 1.1.15. Such versions are potentially affected by the following security issues : - There are several stability bugs in the browser engine that may lead to crashes with evidence of memory corruption. MFSA 2009-01 - Cookies marked HTTPOnly are...
Firefox URL Spoofing And Phising Vulnerability (Windows)
The host is installed with Mozilla Firefox browser and is prone to URL spoofing and phising vulnerability. OpenVAS Vulnerability Test $Id: secpodfirefoxurlspoofvulnwin.nasl 5055 2017-01-20 14:08:39Z teissa $ Firefox URL Spoofing And Phising Vulnerability Windows Authors: Nikita MR Copyright:...
Mozilla Firefox URL Spoofing And Phising Vulnerability - Linux
Mozilla Firefox is prone to URL spoofing and phising vulnerabilities. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Firefox URL Spoofing And Phising Vulnerability - Windows
Mozilla Firefox browser is prone to URL spoofing and phising vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Firefox URL Spoofing And Phising Vulnerability (Linux)
The host is installed with Mozilla Firefox browser and is prone to URL spoofing and phising vulnerability. OpenVAS Vulnerability Test $Id: secpodfirefoxurlspoofvulnlin.nasl 5055 2017-01-20 14:08:39Z teissa $ Firefox URL Spoofing And Phising Vulnerability Linux Authors: Nikita MR Copyright:...
CVE-2009-0652
The Internationalized Domain Names IDN blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by...
Design/Logic Flaw
The Internationalized Domain Names IDN blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by...
CVE-2009-0652
CVE-2009-0652 describes an IDN spoofing vulnerability where the IDN blacklist in Mozilla Firefox (and related Mozilla apps) failed to exclude box-drawing characters, enabling homoglyph-based phishing in subdomains of a .cn domain. Affected products include Firefox 3.0.6 (and others prior to 3.0.9...
CVE-2009-0652
The Internationalized Domain Names IDN blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by...
CVE-2009-0652: Undefined Security Weakness
The Internationalized Domain Names IDN blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by...
CVE-2009-0652
The Internationalized Domain Names IDN blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by...
Writeup by Amit Klein (Trusteer): Address Bar Spoofing for IE6
Address Bar Spoofing Attacks against Microsoft Internet Explorer 6 Amit Klein, Trusteer Summary ======= IE6 is the second most popular web browser after IE7, with market share of around 25 according to recent surveys e.g. http://marketshare.hitslink.com/report.aspx?qprid=2. This write-up presents...
Debian: Security Advisory (DSA-837-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 837-1 (mozilla-firefox)
The remote host is missing an update to mozilla-firefox announced via advisory DSA 837-1. Tom Ferris discovered a bug in the IDN hostname handling of Mozilla Firefox, which is also present in the other browsers from the same family that allows remote attackers to cause a denial of service and...
Fedora 8 : bind-9.5.0-20.b1.fc8 (2007-4655)
bind-chroot-admin called restorecon on /proc filesystem 405281 - 9.5.0b1 release 405281, 392491 - stop with initscript will fail if rndc was disabled 417431 - fixed IDN support in dig and host utilities 412241 - added dst/gssapi.h to -devel subpackage 419091 - CVE-2007-6283 - /etc/rndc.key file...