CVE-2007-1762: Medium severity Mozilla Firefox vulnerability
Published Mar 30, 2007
·Updated
Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against the phishing site blacklist, which allows remote attackers to bypass phishing protection via multiple / (slash) characters in the URL.
Affected Software
3 affected components
Mozilla Firefox=2.0.0.1
Mozilla Firefox=2.0.0.2
Mozilla Firefox=2.0.0.3
Event History
Mar 30, 2007
CVE Published
12:19 AM
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1762?
CVE-2007-1762 has a medium severity level due to its potential to bypass phishing protection.
2
How do I fix CVE-2007-1762?
To fix CVE-2007-1762, you should update your Mozilla Firefox to version 2.0.0.4 or later.
3
What versions of Firefox are affected by CVE-2007-1762?
CVE-2007-1762 affects Mozilla Firefox versions 2.0.0.1 through 2.0.0.3.
4
What type of attack does CVE-2007-1762 enable?
CVE-2007-1762 enables attackers to bypass phishing protection by manipulating URL encoding with multiple slashes.
5
Is CVE-2007-1762 related to phishing attacks?
Yes, CVE-2007-1762 is specifically related to phishing as it circumvents the URL filtering mechanism in Firefox.