CVE-2005-0235

The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Configurations

Configuration 1 (hide)

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*

History

20 Nov 2024, 23:54

Type Values Removed Values Added
References () http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html - Broken Link, Exploit, Vendor Advisory () http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html - Broken Link, Exploit, Vendor Advisory
References () http://marc.info/?l=bugtraq&m=110782704923280&w=2 - Mailing List () http://marc.info/?l=bugtraq&m=110782704923280&w=2 - Mailing List
References () http://www.novell.com/linux/security/advisories/2005_31_opera.html - Broken Link () http://www.novell.com/linux/security/advisories/2005_31_opera.html - Broken Link
References () http://www.securityfocus.com/bid/12461 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/12461 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.shmoo.com/idn - Broken Link, Exploit () http://www.shmoo.com/idn - Broken Link, Exploit
References () http://www.shmoo.com/idn/homograph.txt - Broken Link () http://www.shmoo.com/idn/homograph.txt - Broken Link
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 - Third Party Advisory, VDB Entry () https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 - Third Party Advisory, VDB Entry

28 Feb 2022, 17:45

Type Values Removed Values Added
CWE NVD-CWE-Other NVD-CWE-noinfo
CPE cpe:2.3:a:opera_software:opera_web_browser:7.54:*:*:*:*:*:*:* cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*
References (BUGTRAQ) http://marc.info/?l=bugtraq&m=110782704923280&w=2 - (BUGTRAQ) http://marc.info/?l=bugtraq&m=110782704923280&w=2 - Mailing List
References (MISC) http://www.shmoo.com/idn/homograph.txt - (MISC) http://www.shmoo.com/idn/homograph.txt - Broken Link
References (FULLDISC) http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html - Exploit, Vendor Advisory (FULLDISC) http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html - Broken Link, Exploit, Vendor Advisory
References (MISC) http://www.shmoo.com/idn - Exploit (MISC) http://www.shmoo.com/idn - Broken Link, Exploit
References (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 - (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 - Third Party Advisory, VDB Entry
References (SUSE) http://www.novell.com/linux/security/advisories/2005_31_opera.html - (SUSE) http://www.novell.com/linux/security/advisories/2005_31_opera.html - Broken Link
References (BID) http://www.securityfocus.com/bid/12461 - (BID) http://www.securityfocus.com/bid/12461 - Broken Link, Third Party Advisory, VDB Entry

Information

Published : 2005-05-02 04:00

Updated : 2024-11-20 23:54


NVD link : CVE-2005-0235

Mitre link : CVE-2005-0235

CVE.ORG link : CVE-2005-0235


JSON object : View

Products Affected

opera

  • opera_browser