Description
Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100035 ↗
- http://secunia.com/secunia_research/2004-15/advisory/ ↗
- http://www.mozilla.org/security/announce/mfsa2005-23.html ↗
- http://www.redhat.com/support/errata/RHSA-2005-176.html ↗
- http://www.redhat.com/support/errata/RHSA-2005-384.html ↗
- http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml ↗
- http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml ↗
- http://secunia.com/advisories/13599 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9924 ↗