First published: Mon Feb 07 2005(Updated: )
The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
GNOME Epiphany | ||
Mozilla Camino | =0.8.5 | |
Mozilla Firefox | <=1.6 | |
OmniWeb | =5 | |
Opera | <=7.54 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-0238 is considered a moderate severity vulnerability due to its potential to facilitate phishing attacks.
To fix CVE-2005-0238, ensure that you update to the latest version of the affected software that addresses this vulnerability.
The risks associated with CVE-2005-0238 include the possibility of attackers spoofing domain names, potentially leading to successful phishing attacks.
CVE-2005-0238 affects software such as GNOME Epiphany, Mozilla Camino, OmniGroup OmniWeb, Opera browser, and earlier versions of Mozilla.
CVE-2005-0238 exploits domain names through International Domain Name (IDN) support that allows punycode encoded domain names to use homograph characters.