CVE-2009-0777

Firefox < 3.0.7 - URL Spoofing via Invisible Character Decoding

Title source: llm

Description

Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be displayed and makes it easier for remote attackers to spoof URLs and conduct phishing attacks.

References (19)

Core 19

Core References

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2009-0315.html

Vendor Advisory x_refsource_confirm

http://www.mozilla.org/security/announce/2009/mfsa2009-11.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11222

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6157

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2009/0632

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6039

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6229

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34140

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34272

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/alerts/2009/Mar/1021799.html

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34145

Vendor Advisory x_refsource_confirm

http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/49087

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDVSA-2009:075

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/33990

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=452979

Vendor Advisory x_refsource_confirm

http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7435

Scores

EPSS 0.0150

EPSS Percentile 71.2%

Details

CWE

CWE-20

Status published

Products (50)

mozilla/firefox 1.0

mozilla/firefox 1.0.1

mozilla/firefox 1.0.2

mozilla/firefox 1.0.3

mozilla/firefox 1.0.4

mozilla/firefox 1.0.5

mozilla/firefox 1.0.6

mozilla/firefox 1.0.7

mozilla/firefox 1.0.8

mozilla/firefox 1.5

... and 40 more

Published Mar 05, 2009

Tracked Since Feb 18, 2026