Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be displayed and makes it easier for remote attackers to spoof URLs and conduct phishing attacks.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2009-03-05 02:30
Updated : 2024-02-04 17:33
NVD link : CVE-2009-0777
Mitre link : CVE-2009-0777
CVE.ORG link : CVE-2009-0777
JSON object : View
Products Affected
mozilla
- firefox
- seamonkey
- thunderbird
CWE
CWE-20
Improper Input Validation