CVE-2005-0233 Other in n/a
Remote attackers can spoof domain names using punycode homographs in browsers, facilitating phishing attacks by deceiving users about the true destination.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2005-0233?
CVE-2005-0233 is a high-severity vulnerability in Mozilla Firefox, published on 7 Feb 2005. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Which versions are affected by CVE-2005-0233?
It affects 6 products.
Products include Mozilla Camino, Mozilla Firefox, Mozilla Mozilla, Omnigroup Omniweb, Opera Opera Browser, Opera Software Opera Web Browser.
How do I fix CVE-2005-0233?
Upgrade to a fixed version.
Is CVE-2005-0233 being exploited?
There is no known exploitation of CVE-2005-0233 in the wild and no public exploit code.
Other vulnerabilities in Mozilla Firefox
Sources
Also known as GHSA-9jrp-g945-8329.