CVEvulnerability
CVE-2005-0235
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Affected configurations
• opera opera browser (<= 7.54)
Related
Referenced by CWE · observed example (1)
- CWE-1007 Insufficient Visual Distinction of Homoglyphs Presented to User weakness
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html Broken Link, Exploit, Vendor Advisory
- http://marc.info/?l=bugtraq&m=110782704923280&w=2 Mailing List
- http://www.novell.com/linux/security/advisories/2005_31_opera.html Broken Link
- http://www.securityfocus.com/bid/12461 Broken Link, Third Party Advisory, VDB Entry
- http://www.shmoo.com/idn Broken Link, Exploit
- http://www.shmoo.com/idn/homograph.txt Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 Third Party Advisory, VDB Entry
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html Broken Link, Exploit, Vendor Advisory
- http://marc.info/?l=bugtraq&m=110782704923280&w=2 Mailing List
- http://www.novell.com/linux/security/advisories/2005_31_opera.html Broken Link
- http://www.securityfocus.com/bid/12461 Broken Link, Third Party Advisory, VDB Entry
- http://www.shmoo.com/idn Broken Link, Exploit
- http://www.shmoo.com/idn/homograph.txt Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 Third Party Advisory, VDB Entry