Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog Latest Updates Security News
Sign In Sign Up

CVE-2017-5383

UNKNOWN
Published 2018-06-11T21:00:00
Actions:
No CVSS data available

Description

URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Mozilla

Thunderbird

Affected Versions:

unspecified
Mozilla

Firefox ESR

Affected Versions:

unspecified
Mozilla

Firefox

Affected Versions:

unspecified

References

https://www.mozilla.org/security/advisories/mfsa2017-03/
https://www.mozilla.org/security/advisories/mfsa2017-02/
https://security.gentoo.org/glsa/201702-22
https://bugzilla.mozilla.org/show_bug.cgi?id=1323338
https://www.debian.org/security/2017/dsa-3832
https://security.gentoo.org/glsa/201702-13
https://www.debian.org/security/2017/dsa-3771
http://www.securitytracker.com/id/1037693
https://www.mozilla.org/security/advisories/mfsa2017-01/
http://rhn.redhat.com/errata/RHSA-2017-0190.html
http://rhn.redhat.com/errata/RHSA-2017-0238.html
https://bugzilla.mozilla.org/show_bug.cgi?id=1324716
http://www.securityfocus.com/bid/95769
Published: 2018-06-11T21:00:00
Last Modified: 2024-08-05T14:55:35.810Z
Copied to clipboard!