Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

CVE-2005-0235

Published

18 years ago

Last Modified

2 years ago

CVSSv2.0 Severity

Medium

Impact Analysis

Share on Facebook
Share on LinkedIn
Share on Twitter

The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks..

CVSSv2.0 Score

Severity: Medium
Base Score: 5/10
Exploit Score: 10/10
Access Vector: Network
Access Complexity: Low
Authentication Required: None
Impact Score: 2.9/10
Confidentiality Impact: None
Availability Impact: None
Integrity Impact: Partial

Products Affected

CPE	Affected	Vulnerable	Excluding	Edit
cpe:2.3:a:opera:opera_browser::::::::	Yes	-	-

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html
http://www.shmoo.com/idn
http://www.shmoo.com/idn/homograph.txt
http://www.securityfocus.com/bid/12461
http://www.novell.com/linux/security/advisories/2005_31_opera.html
http://marc.info/?l=bugtraq&m=110782704923280&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/19236