81 matches found
CVE-2007-1762
Summary : CVE-2007-1762 affects Mozilla Firefox 2.0.0.1–2.0.0.3. The issue is that Firefox does not canonicalize URLs before checking them against the phishing site blacklist, enabling a remote attacker to bypass phishing protection by using multiple slashes in the URL. Impact (as stated) : Phish...
Hardcoded credentials
Mozilla Firefox 2.0.0.3 does not check URLs embedded in 1 object or 2 iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection...
CVE-2007-1736
Mozilla Firefox 2.0.0.3 does not check URLs embedded in 1 object or 2 iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection...
Design/Logic Flaw
Opera 9.10 does not check URLs embedded in 1 object or 2 iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection...
CVE-2007-1737
Opera 9.10 does not check URLs embedded in 1 object or 2 iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection...
CVE-2007-1737
Opera 9.10 is affected: URLs embedded in object or iframe HTML tags are not checked against the phishing site blacklist, allowing bypass of phishing protection. Root cause is the failure to validate these embedded URLs. Impact is bypass of anti-phishing checks; explicit exploit details or in-the-...
CVE-2007-1737: Undefined Security Weakness
Opera 9.10 does not check URLs embedded in 1 object or 2 iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection...
CVE-2007-1736: Undefined Security Weakness
Mozilla Firefox 2.0.0.3 does not check URLs embedded in 1 object or 2 iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection...
Bypass phishing protection in Firefox / Opera
Hi, i've tested a simple way to bypass the phishing protection in Firefox 2.0.0.3 and Opera 9.10. Aparently both browsers fails to detect a phishing site if it is embeded in an IFRAME / OBJECT label. I've released some demostrations to test the above: http://zonafirefox.googlepages.com/prueba.htm...
CVE-2006-6971
Mozilla Firefox 2.0, possibly only when running on Windows, allows remote attackers to bypass the Phishing Protection mechanism by representing an IP address in 1 dotted-hex, 2 dotted-octal, 3 single decimal integer, 4 single hex integer, or 5 single octal integer format, which is not captured by...
CVE-2007-0802
Mozilla Firefox 2.0.0.1 allows remote attackers to bypass the Phishing Protection mechanism by adding certain characters to the end of the domain name, as demonstrated by the "." and "/" characters, which is not caught by the Phishing List blacklist filter...
CVE-2007-0802
Mozilla Firefox 2.0.0.1 allows remote attackers to bypass the Phishing Protection mechanism by adding certain characters to the end of the domain name, as demonstrated by the "." and "/" characters, which is not caught by the Phishing List blacklist filter...
CVE-2007-0802
Mozilla Firefox 2.0.0.1 allows remote attackers to bypass the Phishing Protection mechanism by adding certain characters to the end of the domain name, as demonstrated by the "." and "/" characters, which is not caught by the Phishing List blacklist filter...
CVE-2007-0802
CVE-2007-0802 affects Mozilla Firefox 2.0.0.1, where remote attackers could bypass phishing protection by appending certain characters to the domain name (e.g., ‘.’ or ‘/’), which are not caught by the Phishing List blacklist. The initial description and connected sources consistently describe th...
CVE-2006-6971
Mozilla Firefox 2.0, possibly only when running on Windows, allows remote attackers to bypass the Phishing Protection mechanism by representing an IP address in 1 dotted-hex, 2 dotted-octal, 3 single decimal integer, 4 single hex integer, or 5 single octal integer format, which is not captured by...
CVE-2006-6971
Mozilla Firefox 2.0 (Windows) vulnerability: phishing-protection can be bypassed by representing an IP address in formats such as dotted-hex, dotted-octal, decimal, hex, or octal, which evade the blacklist filter. Root cause is parsing/format handling that fails to normalize these IP representati...
CVE-2006-6971: Improper Input Validation
Mozilla Firefox 2.0, possibly only when running on Windows, allows remote attackers to bypass the Phishing Protection mechanism by representing an IP address in 1 dotted-hex, 2 dotted-octal, 3 single decimal integer, 4 single hex integer, or 5 single octal integer format, which is not captured by...
CVE-2007-0802: Improper Input Validation
Mozilla Firefox 2.0.0.1 allows remote attackers to bypass the Phishing Protection mechanism by adding certain characters to the end of the domain name, as demonstrated by the "." and "/" characters, which is not caught by the Phishing List blacklist filter...
Firefox 2.0.0.1 and Opera 9.10 Anty Fraud/Phishing Protection bypass.
Firefox 2.0.0.1 and Opera 9.10 Anty Fraud/Phishing Protection bypass. + Subject: Firefox 2.0.0.1 Phishing Protection bypass Opera 9.10 Fraud Protection bypass + Version: Firefox 2.0.0.1 Linux | Windows Opera 9.10 Final Linux build 521 | Windows build 8679 + Discovered by: Kanedaaa:...