CVE-2005-0235

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-0235
The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html Broken Link Exploit Vendor Advisory
http://marc.info/?l=bugtraq&m=110782704923280&w=2 Mailing List
http://www.novell.com/linux/security/advisories/2005_31_opera.html Broken Link
http://www.securityfocus.com/bid/12461 Broken Link Third Party Advisory VDB Entry
http://www.shmoo.com/idn Broken Link Exploit
http://www.shmoo.com/idn/homograph.txt Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*
History

28 Feb 2022, 17:45

Type Values Removed Values Added
CPE cpe:2.3:a:opera_software:opera_web_browser:7.54:*:*:*:*:*:*:* cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*
CWE NVD-CWE-Other NVD-CWE-noinfo
References (BUGTRAQ) http://marc.info/?l=bugtraq&m=110782704923280&w=2 - (BUGTRAQ) http://marc.info/?l=bugtraq&m=110782704923280&w=2 - Mailing List
References (MISC) http://www.shmoo.com/idn/homograph.txt - (MISC) http://www.shmoo.com/idn/homograph.txt - Broken Link
References (FULLDISC) http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html - Exploit, Vendor Advisory (FULLDISC) http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html - Broken Link, Exploit, Vendor Advisory
References (MISC) http://www.shmoo.com/idn - Exploit (MISC) http://www.shmoo.com/idn - Broken Link, Exploit
References (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 - (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 - Third Party Advisory, VDB Entry
References (SUSE) http://www.novell.com/linux/security/advisories/2005_31_opera.html - (SUSE) http://www.novell.com/linux/security/advisories/2005_31_opera.html - Broken Link
References (BID) http://www.securityfocus.com/bid/12461 - (BID) http://www.securityfocus.com/bid/12461 - Broken Link, Third Party Advisory, VDB Entry
Information

Published : 2005-05-02 04:00

Updated : 2024-02-04 16:52

NVD link : CVE-2005-0235

Mitre link : CVE-2005-0235

CVE.ORG link : CVE-2005-0235

JSON object : View

Products Affected

opera

  • opera_browser
CWE
NVD-CWE-noinfo