Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the \u115A through \u115E characters.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade xulrunner-devel | Dec 1, 2016 | Jun 12, 2009 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade firefoxUpgrade seamonkeyUpgrade linux-firefox-develUpgrade linux-firefox | Dec 10, 2025 | Jun 12, 2009 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade dev-libs/nss. | Oct 30, 2017 | Jun 12, 2009 |
| Mfsa2009 25 | — | Upgrade to Mozilla Firefox version 3.0.11 | Jun 14, 2012 | Jun 12, 2009 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunnerUpgrade xulrunner-develUpgrade xulrunner-devel-unstable | Oct 16, 2024 | Jun 12, 2009 |
| Suse | — | Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190-x86Upgrade gconf2-x86Upgrade libidl-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-translationsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192Upgrade libfreebl3-x86Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nssUpgrade gconf2-32bitUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner191-x86Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade orbit2-x86Upgrade mozilla-xulrunner191Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-x86Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner190-translationsUpgrade libidlUpgrade orbit2Upgrade orbit2-32bitUpgrade mozilla-xulrunner191-translationsUpgrade libidl-x86Upgrade libfreebl3Upgrade mozilla-nsprUpgrade gconf2 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade xulrunner-1.9Upgrade firefox-3.0 | Nov 8, 2024 | Jun 12, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub