Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be displayed and makes it easier for remote attackers to spoof URLs and conduct phishing attacks.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:00
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html - | |
References | () http://secunia.com/advisories/34140 - Vendor Advisory | |
References | () http://secunia.com/advisories/34145 - Vendor Advisory | |
References | () http://secunia.com/advisories/34272 - Vendor Advisory | |
References | () http://securitytracker.com/alerts/2009/Mar/1021799.html - | |
References | () http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm - | |
References | () http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document - | |
References | () http://www.mandriva.com/security/advisories?name=MDVSA-2009:075 - | |
References | () http://www.mozilla.org/security/announce/2009/mfsa2009-11.html - Vendor Advisory | |
References | () http://www.redhat.com/support/errata/RHSA-2009-0315.html - | |
References | () http://www.securityfocus.com/bid/33990 - | |
References | () http://www.vupen.com/english/advisories/2009/0632 - Vendor Advisory | |
References | () https://bugzilla.mozilla.org/show_bug.cgi?id=452979 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/49087 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11222 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6039 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6157 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6229 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7435 - |
Information
Published : 2009-03-05 02:30
Updated : 2025-04-09 00:30
NVD link : CVE-2009-0777
Mitre link : CVE-2009-0777
CVE.ORG link : CVE-2009-0777
JSON object : View
Products Affected
mozilla
- seamonkey
- thunderbird
- firefox
CWE
CWE-20
Improper Input Validation