CVEvulnerability
CVE-2005-0234
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Affected configurations
• apple safari 1.2.5
Related
Referenced by CWE · observed example (1)
- CWE-1007 Insufficient Visual Distinction of Homoglyphs Presented to User weakness
References
- http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html Vendor Advisory
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html Exploit, Vendor Advisory
- http://marc.info/?l=bugtraq&m=110782704923280&w=2 marc.info
- http://www.securityfocus.com/bid/12461 www.securityfocus.com
- http://www.shmoo.com/idn Exploit
- http://www.shmoo.com/idn/homograph.txt Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 exchange.xforce.ibmcloud.com
- http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html Vendor Advisory
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html Exploit, Vendor Advisory
- http://marc.info/?l=bugtraq&m=110782704923280&w=2 marc.info
- http://www.securityfocus.com/bid/12461 www.securityfocus.com
- http://www.shmoo.com/idn Exploit
- http://www.shmoo.com/idn/homograph.txt Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 exchange.xforce.ibmcloud.com