CVE-2005-0235
Last modified
CVE-2005-0235 is a vulnerability of currently unknown severity. The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.. EPSS estimates a 1.82% chance of exploitation in the next 30 days.
Description
The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Opera | Opera Browser | <= 7.54 |
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.htmlBroken Link, Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/12461Broken Link, Third Party Advisory, VDB Entry
- http://www.shmoo.com/idnBroken Link, Exploit
- http://www.shmoo.com/idn/homograph.txtBroken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19236Third Party Advisory, VDB Entry
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.htmlBroken Link, Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/12461Broken Link, Third Party Advisory, VDB Entry
- http://www.shmoo.com/idnBroken Link, Exploit
- http://www.shmoo.com/idn/homograph.txtBroken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19236Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-0235?
How severe is CVE-2005-0235?
How do I fix CVE-2005-0235?
Are you affected by CVE-2005-0235?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
