CVE-2009-0777: Input Validation
Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be displayed and makes it easier for remote attackers to spoof URLs and conduct phishing attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0777?
CVE-2009-0777 is rated as a moderate severity vulnerability due to its potential to enable phishing attacks through URL spoofing.
How do I fix CVE-2009-0777?
To fix CVE-2009-0777, update your Mozilla Firefox, Thunderbird, or SeaMonkey to the latest version available, specifically version 3.0.7 or later for Firefox, version 2.0.0.21 or later for Thunderbird, and version 1.1.15 or later for SeaMonkey.
What systems are affected by CVE-2009-0777?
CVE-2009-0777 affects outdated versions of Mozilla Firefox prior to 3.0.7, Thunderbird prior to 2.0.0.21, and SeaMonkey prior to 1.1.15.
How does CVE-2009-0777 work?
CVE-2009-0777 works by allowing invisible characters to be decoded in the location bar, which can lead to misrepresentation of URLs and increase the likelihood of successful phishing attempts.
Is CVE-2009-0777 being actively exploited?
While CVE-2009-0777 has the potential for exploitation, there are no confirmed reports of active exploitation in the wild as of now.