CVE-2013-1699 — Mozilla Firefox vulnerability

CWE-3106 documents5 sources
Severity
5.0MEDIUMNVD
EPSS
0.4%
top 41.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mozilla Firefox
Timeline
PublishedJun 26
Latest updateMay 17

Description

The Internationalized Domain Name (IDN) display algorithm in Mozilla Firefox before 22.0 does not properly handle the .com, .name, and .net top-level domains, which allows remote attackers to spoof the address bar via unspecified homograph characters.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDmozilla/firefox21.0+5

🔴Vulnerability Details

1
GHSA
GHSA-8g7p-v6f6-52wp: The Internationalized Domain Name (IDN) display algorithm in Mozilla Firefox before 22↗2022-05-17
▶

📋Vendor Advisories

3
Ubuntu
Firefox regression↗2013-07-03
▶
Ubuntu
Firefox vulnerabilities↗2013-06-26
▶
Red Hat
Mozilla: Homograph domain spoofing in .com, .net and .name (MFSA 2013-61)↗2013-06-25
▶

💬Community

1
Bugzilla
CVE-2013-1699 Mozilla: Homograph domain spoofing in .com, .net and .name (MFSA 2013-61)↗2013-06-25
▶