medium5.0
CVE-2007-1762
Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against the phishing site blacklist, which allows remote attackers to b…
Impact
Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against the phishing site blacklist, which allows remote attackers to bypass phishing protection via multiple / (slash) characters in the URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | Versions 2.0.0.1, 2.0.0.2, 2.0.0.3 |
References
- NVD record
- CVE.org record
- http://osvdb.org/34535
- http://www.securityfocus.com/archive/1/464149/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33486
- http://osvdb.org/34535
- http://www.securityfocus.com/archive/1/464149/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33486