CVE-2005-0235

Opera Browser < 7.54 - Domain Spoofing via Punycode Homograph Attack

Title source: llm

Description

The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

References (7)

Core 7

Core References

Broken Link x_refsource_misc

http://www.shmoo.com/idn/homograph.txt

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/19236

Broken Link, Exploit, Vendor Advisory mailing-list x_refsource_fulldisc

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html

Broken Link, Exploit x_refsource_misc

http://www.shmoo.com/idn

Broken Link vendor-advisory x_refsource_suse

http://www.novell.com/linux/security/advisories/2005_31_opera.html

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=110782704923280&w=2

Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/12461

Scores

EPSS 0.0064

EPSS Percentile 70.9%

Details

Status published

Products (1)

opera/opera_browser < 7.54

Published May 02, 2005

Tracked Since Feb 18, 2026