VulnerabilityModified

CVE-2005-0235

The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets,…

MEDIUM 5.0EPSS 1.82%

Does this matter?

Lower severity and a low EPSS score (1.82%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS: 1.82% probability · 78th percentile
CISA KEV: Not listed
Affected: opera/opera browser
Source: secalert@redhat.com

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.htmlBroken Link, Exploit, Vendor Advisory
http://marc.info/?l=bugtraq&m=110782704923280&w=2Mailing List
http://www.novell.com/linux/security/advisories/2005_31_opera.htmlBroken Link
http://www.securityfocus.com/bid/12461Broken Link, Third Party Advisory, VDB Entry
http://www.shmoo.com/idnBroken Link, Exploit
http://www.shmoo.com/idn/homograph.txtBroken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/19236Third Party Advisory, VDB Entry
http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.htmlBroken Link, Exploit, Vendor Advisory
http://marc.info/?l=bugtraq&m=110782704923280&w=2Mailing List
http://www.novell.com/linux/security/advisories/2005_31_opera.htmlBroken Link
http://www.securityfocus.com/bid/12461Broken Link, Third Party Advisory, VDB Entry
http://www.shmoo.com/idnBroken Link, Exploit
http://www.shmoo.com/idn/homograph.txtBroken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/19236Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.