Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be displayed and makes it easier for remote attackers to spoof URLs and conduct phishing attacks.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: redhat

Published: 2009-03-05T02:00:00

Updated: 2017-09-28T12:57:01

Reserved: 2009-03-03T00:00:00


Link: CVE-2009-0777

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2009-03-05T02:30:00.500

Modified: 2017-09-29T01:34:01.433


Link: CVE-2009-0777

JSON object: View

cve-icon Redhat Information

No data.

CWE