CVE-2005-0234

Safari 1.2.5 - Domain Spoofing via Punycode Homograph Attack

Title source: llm

Description

The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

References (7)

Core 7

Core References

Vendor Advisory x_refsource_misc

http://www.shmoo.com/idn/homograph.txt

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/19236

Exploit, Vendor Advisory mailing-list x_refsource_fulldisc

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html

Exploit x_refsource_misc

http://www.shmoo.com/idn

Vendor Advisory vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=110782704923280&w=2

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/12461

Scores

EPSS 0.0165

EPSS Percentile 74.2%

Details

Status published

Products (1)

apple/safari 1.2.5

Published May 02, 2005

Tracked Since Feb 18, 2026