70 matches found
CVE-2007-3142
CVE-2007-3142 affects Opera 9.21, where a visual truncation of a long hostname can spoof the address bar and enable phishing (demonstrated via HTTP Basic Authentication). The Gentoo GLSA advisory recommends upgrading to Opera ≥ 9.23 to resolve the issue. No exploit details are provided beyond the...
CVE-2007-3145
Visual truncation vulnerability in Galeon 2.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication...
CVE-2007-3144
Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication...
CVE-2007-3144
The CVE-2007-3144 entry describes a visual truncation flaw in Mozilla 1.7.12 where a long hostname is truncated in the address bar, allowing remote attackers to spoof the URL and potentially conduct phishing attacks (e.g., via HTTP Basic Authentication). Affected component is Mozilla’s UI renderi...
CVE-2007-3143
CVE-2007-3143 affects Konqueror 3.5.5. The issue is a visual truncation vulnerability in the address bar: when a long hostname is shown, it is truncated, which can allow remote attackers to spoof the URL and potentially conduct phishing attacks (notably demonstrated via HTTP Basic Authentication)...
CVE-2007-4225
Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password portion...
CVE-2006-5544
CVE-2006-5544 describes a visual truncation vulnerability in Microsoft Internet Explorer 7 where a malicious URL containing non-breaking spaces (%A0) causes the address bar to omit characters, enabling possible address bar spoofing and phishing. The vulnerability is tied to the address bar render...
CVE-2006-5544
Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a malicious URL containing non-breaking spaces %A0, which causes the address bar to omit some characters from the URL...
CVE-2004-2530
Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files via a filename with a large number of spaces followed by the real extension, which is not displayed in the dialog box...
CVE-2004-2530
CVE-2004-2530 affects the Gadu-Gadu client. The issue is a visual truncation vulnerability in file name handling that lets remote attackers spoof the file extension of transmitted files by using a filename with many spaces before the real extension, which is not shown in the dialog. Impact stated...