CVE-2005-0585 Other in n/a
Remote attackers can spoof legitimate websites by truncating long sub-domains or paths in the address bar, facilitating phishing attacks against Firefox users.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2005-0585?
CVE-2005-0585 is a low-severity vulnerability in Mozilla Firefox, published on 28 Feb 2005. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks.
Which versions are affected by CVE-2005-0585?
It affects 2 products.
Products include Mozilla Firefox, Mozilla Mozilla.
How do I fix CVE-2005-0585?
Upgrade to a fixed version.
Is CVE-2005-0585 being exploited?
There is no known exploitation of CVE-2005-0585 in the wild and no public exploit code.
Other vulnerabilities in Mozilla Firefox
Sources
Also known as GHSA-cxhx-r8q3-rf4p.