First published: Fri Mar 30 2007(Updated: )
Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against the phishing site blacklist, which allows remote attackers to bypass phishing protection via multiple / (slash) characters in the URL.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Firefox | =2.0.0.2 | |
Mozilla Firefox | =2.0.0.3 | |
Mozilla Firefox | =2.0.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-1762 has a medium severity level due to its potential to bypass phishing protection.
To fix CVE-2007-1762, you should update your Mozilla Firefox to version 2.0.0.4 or later.
CVE-2007-1762 affects Mozilla Firefox versions 2.0.0.1 through 2.0.0.3.
CVE-2007-1762 enables attackers to bypass phishing protection by manipulating URL encoding with multiple slashes.
Yes, CVE-2007-1762 is specifically related to phishing as it circumvents the URL filtering mechanism in Firefox.