CVE-2007-0802: Input Validation
Mozilla Firefox 2.0.0.1 allows remote attackers to bypass the Phishing Protection mechanism by adding certain characters to the end of the domain name, as demonstrated by the "." and "/" characters, which is not caught by the Phishing List blacklist filter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0802?
CVE-2007-0802 is considered to have a moderate severity level as it allows attackers to bypass phishing protection.
How do I fix CVE-2007-0802?
To fix CVE-2007-0802, upgrade to a newer version of Mozilla Firefox that includes patched phishing protection mechanisms.
Which versions of Firefox are affected by CVE-2007-0802?
CVE-2007-0802 specifically affects Mozilla Firefox version 2.0.0.1.
What impact does CVE-2007-0802 have on users?
CVE-2007-0802 can potentially expose users to phishing attacks and fraudulent sites that would normally be filtered out.
Can other browsers also be affected by CVE-2007-0802?
Yes, while CVE-2007-0802 primarily affects Firefox 2.0.0.1, Opera 9.10 is also mentioned as potentially affected.