NVD

Id
49100  
Name
CVE-2009-1834  
Description
Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the u115A through u115E characters.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-06-12  
Modified Date
2010-08-21  
Seq
2009-1834  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
248299 49100 CVE-2009-1834 oval:org.mitre.oval:def:10436  View
248300 49100 CVE-2009-1834 SSA:2009-167-01  View
248301 49100 CVE-2009-1834 264308  View
248302 49100 CVE-2009-1834 DSA-1820  View
248303 49100 CVE-2009-1834 http://www.mozilla.org/security/announce/2009/mfsa2009-25.html  View
248304 49100 CVE-2009-1834 35326  View
248305 49100 CVE-2009-1834 35388  View
248306 49100 CVE-2009-1834 ADV-2009-1572  View
248307 49100 CVE-2009-1834 https://bugzilla.mozilla.org/show_bug.cgi?id=479413  View
248308 49100 CVE-2009-1834 https://bugzilla.redhat.com/show_bug.cgi?id=503573  View
248309 49100 CVE-2009-1834 RHSA-2009:1095  View
248310 49100 CVE-2009-1834 FEDORA-2009-6366  View
248311 49100 CVE-2009-1834 FEDORA-2009-6411  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40823 JVNDB-2009-001829 Mozilla Firefox/SeaMonkey におけるロケーションバーを偽装される脆弱性 Mozilla Firefox/SeaMonkey には、空白として表示される無効な Unicode 文字を持つ IDN により、ロケーションバーを偽装される脆弱性が存在します。 CVE-2009-1834 39265 CVE-2009-1834 49100 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001829.html 2009-06-11 2009-07-30 View