CVE-2005-0238
CVE-2005-0238
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
EPSS 1.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
epiphany-browser Debian:12
- Affected ranges
- ECOSYSTEM: < 1.4.8-2
Update to 1.4.8-2
epiphany-browser Debian:13
- Affected ranges
- ECOSYSTEM: < 1.4.8-2
Update to 1.4.8-2
epiphany-browser Debian:14
- Affected ranges
- ECOSYSTEM: < 1.4.8-2
Update to 1.4.8-2
Original sources
- http://www.shmoo.com/idn/homograph.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19236
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html
- http://www.shmoo.com/idn
- https://bugzilla.redhat.com/beta/show_bug.cgi?id=147399
- http://www.securityfocus.com/bid/12461
- https://nvd.nist.gov/vuln/detail/CVE-2005-0238