CVE-2005-0235

Опубликовано: 02 мая 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

Ссылки

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html
Broken Link
Exploit
Vendor Advisory
http://marc.info/?l=bugtraq&m=110782704923280&w=2
Mailing List
http://www.novell.com/linux/security/advisories/2005_31_opera.html
Broken Link
http://www.securityfocus.com/bid/12461
Broken Link
Third Party Advisory
VDB Entry
http://www.shmoo.com/idn
Broken Link
Exploit
http://www.shmoo.com/idn/homograph.txt
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/19236
Third Party Advisory
VDB Entry
http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html
Broken Link
Exploit
Vendor Advisory
http://marc.info/?l=bugtraq&m=110782704923280&w=2
Mailing List
http://www.novell.com/linux/security/advisories/2005_31_opera.html
Broken Link
http://www.securityfocus.com/bid/12461
Broken Link
Third Party Advisory
VDB Entry
http://www.shmoo.com/idn
Broken Link
Exploit
http://www.shmoo.com/idn/homograph.txt
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/19236
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*

Версия до 7.54 (включая)

EPSS

Процентиль: 70%

0.00642

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-fvfw-wwvf-2x7q

github

почти 4 года назад