CVE-2005-0234

The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Configurations

Configuration 1 (hide)

cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*

History

20 Nov 2024, 23:54

Type Values Removed Values Added
References () http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html - Vendor Advisory () http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html - Vendor Advisory
References () http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html - Exploit, Vendor Advisory () http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html - Exploit, Vendor Advisory
References () http://marc.info/?l=bugtraq&m=110782704923280&w=2 - () http://marc.info/?l=bugtraq&m=110782704923280&w=2 -
References () http://www.securityfocus.com/bid/12461 - () http://www.securityfocus.com/bid/12461 -
References () http://www.shmoo.com/idn - Exploit () http://www.shmoo.com/idn - Exploit
References () http://www.shmoo.com/idn/homograph.txt - Vendor Advisory () http://www.shmoo.com/idn/homograph.txt - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 -

Information

Published : 2005-05-02 04:00

Updated : 2024-11-20 23:54


NVD link : CVE-2005-0234

Mitre link : CVE-2005-0234

CVE.ORG link : CVE-2005-0234


JSON object : View

Products Affected

apple

  • safari