CVE-2007-3144: Medium severity Mozilla Mozilla vulnerability

Published Jun 11, 2007

Updated

Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.

Affected Software

1 affected component

Mozilla Mozilla=1.7.12

Event History

Jun 11, 2007

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3144?

CVE-2007-3144 has a medium severity rating, as it allows for visual spoofing that can lead to phishing attacks.

How do I fix CVE-2007-3144?

To mitigate CVE-2007-3144, consider upgrading to a later version of Mozilla that does not exhibit this vulnerability.

Who is affected by CVE-2007-3144?

CVE-2007-3144 specifically affects users of Mozilla version 1.7.12.

What type of attack does CVE-2007-3144 enable?

CVE-2007-3144 enables remote attackers to spoof the address bar, potentially facilitating phishing attacks.

When was CVE-2007-3144 reported?

CVE-2007-3144 was reported in 2007, highlighting vulnerabilities in older versions of the Mozilla browser.