CVE

Id
39269  
CVE No.
CVE-2009-1834  
Status
Candidate  
Description
Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the u115A through u115E characters.  
Phase
Assigned (20090529)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
431767 39269 CVE-2009-1834 CONFIRM:http://www.mozilla.org/security/announce/2009/mfsa2009-25.html  View
431768 39269 CVE-2009-1834 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=479413  View
431769 39269 CVE-2009-1834 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=503573  View
431770 39269 CVE-2009-1834 DEBIAN:DSA-1820  View
431771 39269 CVE-2009-1834 URL:http://www.debian.org/security/2009/dsa-1820  View
431772 39269 CVE-2009-1834 FEDORA:FEDORA-2009-6366  View
431773 39269 CVE-2009-1834 URL:https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html  View
431774 39269 CVE-2009-1834 FEDORA:FEDORA-2009-6411  View
431775 39269 CVE-2009-1834 URL:https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html  View
431776 39269 CVE-2009-1834 REDHAT:RHSA-2009:1095  View
431777 39269 CVE-2009-1834 URL:https://rhn.redhat.com/errata/RHSA-2009-1095.html  View
431778 39269 CVE-2009-1834 SLACKWARE:SSA:2009-167-01  View
431779 39269 CVE-2009-1834 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468  View
431780 39269 CVE-2009-1834 SUNALERT:264308  View
431781 39269 CVE-2009-1834 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1  View
431782 39269 CVE-2009-1834 BID:35326  View
431783 39269 CVE-2009-1834 URL:http://www.securityfocus.com/bid/35326  View
431784 39269 CVE-2009-1834 BID:35388  View
431785 39269 CVE-2009-1834 URL:http://www.securityfocus.com/bid/35388  View
431786 39269 CVE-2009-1834 OSVDB:55162  View
431787 39269 CVE-2009-1834 URL:http://osvdb.org/55162  View
431788 39269 CVE-2009-1834 OVAL:oval:org.mitre.oval:def:10436  View
431789 39269 CVE-2009-1834 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10436  View
431790 39269 CVE-2009-1834 SECUNIA:35331  View
431791 39269 CVE-2009-1834 URL:http://secunia.com/advisories/35331  View
431792 39269 CVE-2009-1834 SECUNIA:35431  View
431793 39269 CVE-2009-1834 URL:http://secunia.com/advisories/35431  View
431794 39269 CVE-2009-1834 SECUNIA:35439  View
431795 39269 CVE-2009-1834 URL:http://secunia.com/advisories/35439  View
431796 39269 CVE-2009-1834 SECUNIA:35468  View
431797 39269 CVE-2009-1834 URL:http://secunia.com/advisories/35468  View
431798 39269 CVE-2009-1834 SECUNIA:35415  View
431799 39269 CVE-2009-1834 URL:http://secunia.com/advisories/35415  View
431800 39269 CVE-2009-1834 VUPEN:ADV-2009-1572  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40818 JVNDB-2009-001824 複数の Mozilla 製品のガベージコレクション実装における任意の JavaScript を実行される脆弱性 複数の Mozilla 製品のガベージコレクション実装には、オーナードキュメントが NULL となるため、クローム権限を持つ任意の JavaScript を実行される脆弱性が存在します。 CVE-2009-1838 39269 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001824.html  View