VulnerabilityModified

CVE-2005-0238

The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets,…

MEDIUM 5.0EPSS 1.55%

Does this matter?

Lower severity and a low EPSS score (1.55%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS: 1.55% probability · 74th percentile
CISA KEV: Not listed
Affected: gnome/epiphany · mozilla/camino · mozilla/mozilla · omnigroup/omniweb · opera/opera browser
Source: secalert@redhat.com

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.htmlExploit, Vendor Advisory
http://www.securityfocus.com/bid/12461Broken Link, Third Party Advisory, VDB Entry
http://www.shmoo.com/idnBroken Link, Exploit, Vendor Advisory
http://www.shmoo.com/idn/homograph.txtBroken Link, Exploit, Vendor Advisory
https://bugzilla.redhat.com/beta/show_bug.cgi?id=147399Broken Link, Issue Tracking, Patch, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19236Third Party Advisory, VDB Entry
http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.htmlExploit, Vendor Advisory
http://www.securityfocus.com/bid/12461Broken Link, Third Party Advisory, VDB Entry
http://www.shmoo.com/idnBroken Link, Exploit, Vendor Advisory
http://www.shmoo.com/idn/homograph.txtBroken Link, Exploit, Vendor Advisory
https://bugzilla.redhat.com/beta/show_bug.cgi?id=147399Broken Link, Issue Tracking, Patch, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19236Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.