CVE-2005-0233
The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6...
CVE-2005-0233 is a high vulnerability (CVSS 7.5) in Mozilla Camino, published February 7, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 20.4%, the 97th percentile. Fixed in firefox 0:1.0.1-1.4.3.
The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Exploit likelihood
What each source reports
NVD Score used
7.5
The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
- Record
CVE-2005-0233- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
- Record
CVE-2005-0233- Updated
- 2026-11-02
EUVDEUVD-2005-0234 No score
The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
- Record
EUVD-2005-0234- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9jrp-g945-8329 No score
The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6...
The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
- Record
GHSA-9jrp-g945-8329- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:4::as |
before 0:1.0.1-1.4.3 | 0:1.0.1-1.4.3 |
firefoxRed Hat:enterprise_linux:4::desktop |
before 0:1.0.1-1.4.3 | 0:1.0.1-1.4.3 |
firefoxRed Hat:enterprise_linux:4::es |
before 0:1.0.1-1.4.3 | 0:1.0.1-1.4.3 |
firefoxRed Hat:enterprise_linux:4::ws |
before 0:1.0.1-1.4.3 | 0:1.0.1-1.4.3 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
shmoo.com/idn/homograph.txt
exchange.xforce.ibmcloud.com/vulnerabilities/19236
lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html
shmoo.com/idn
novell.com/linux/security/advisories/2005_16_mozilla_firefox.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11229
Show 92 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100029
redhat.com/support/errata/RHSA-2005-176.html
redhat.com/support/errata/RHSA-2005-384.html
gentoo.org/security/en/glsa/glsa-200503-30.xml
gentoo.org/security/en/glsa/glsa-200503-10.xml
marc.info?l=bugtraq&m=110782704923280&w=2
securityfocus.com/bid/12461
mozilla.org/security/announce/mfsa2005-29.html
nvd.nist.gov/vuln/detail/CVE-2005-0233
github.com/advisories/GHSA-9jrp-g945-8329
access.redhat.com/errata/RHSA-2005:176
access.redhat.com/security/updates/classification
mozilla.org/projects/security/known-vulnerabilities.html
bugzilla.redhat.com/show_bug.cgi?id=142506
bugzilla.redhat.com/show_bug.cgi?id=144216
bugzilla.redhat.com/show_bug.cgi?id=147402
bugzilla.redhat.com/show_bug.cgi?id=147727
bugzilla.redhat.com/show_bug.cgi?id=147735
bugzilla.redhat.com/show_bug.cgi?id=149876
bugzilla.redhat.com/show_bug.cgi?id=149923
bugzilla.redhat.com/show_bug.cgi?id=149929
bugzilla.redhat.com/show_bug.cgi?id=149930
bugzilla.redhat.com/show_bug.cgi?id=149931
bugzilla.redhat.com/show_bug.cgi?id=149934
bugzilla.redhat.com/show_bug.cgi?id=149936
bugzilla.redhat.com/show_bug.cgi?id=149937
bugzilla.redhat.com/show_bug.cgi?id=149938
bugzilla.redhat.com/show_bug.cgi?id=149939
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_176.json
access.redhat.com/security/cve/CVE-2004-1156
bugzilla.redhat.com/show_bug.cgi?id=1617383
cve.org/CVERecord?id=CVE-2004-1156
nvd.nist.gov/vuln/detail/CVE-2004-1156
access.redhat.com/security/cve/CVE-2005-0231
bugzilla.redhat.com/show_bug.cgi?id=1617500
cve.org/CVERecord?id=CVE-2005-0231
nvd.nist.gov/vuln/detail/CVE-2005-0231
access.redhat.com/security/cve/CVE-2005-0232
bugzilla.redhat.com/show_bug.cgi?id=1617501
cve.org/CVERecord?id=CVE-2005-0232
nvd.nist.gov/vuln/detail/CVE-2005-0232
access.redhat.com/security/cve/CVE-2005-0233
bugzilla.redhat.com/show_bug.cgi?id=1617502
cve.org/CVERecord?id=CVE-2005-0233
access.redhat.com/security/cve/CVE-2005-0255
bugzilla.redhat.com/show_bug.cgi?id=1617509
cve.org/CVERecord?id=CVE-2005-0255
nvd.nist.gov/vuln/detail/CVE-2005-0255
access.redhat.com/security/cve/CVE-2005-0527
bugzilla.redhat.com/show_bug.cgi?id=1617535
cve.org/CVERecord?id=CVE-2005-0527
nvd.nist.gov/vuln/detail/CVE-2005-0527
access.redhat.com/security/cve/CVE-2005-0578
bugzilla.redhat.com/show_bug.cgi?id=1617540
cve.org/CVERecord?id=CVE-2005-0578
nvd.nist.gov/vuln/detail/CVE-2005-0578
access.redhat.com/security/cve/CVE-2005-0584
bugzilla.redhat.com/show_bug.cgi?id=1617541
cve.org/CVERecord?id=CVE-2005-0584
nvd.nist.gov/vuln/detail/CVE-2005-0584
access.redhat.com/security/cve/CVE-2005-0585
bugzilla.redhat.com/show_bug.cgi?id=1617542
cve.org/CVERecord?id=CVE-2005-0585
nvd.nist.gov/vuln/detail/CVE-2005-0585
access.redhat.com/security/cve/CVE-2005-0586
bugzilla.redhat.com/show_bug.cgi?id=1617544
cve.org/CVERecord?id=CVE-2005-0586
nvd.nist.gov/vuln/detail/CVE-2005-0586
access.redhat.com/security/cve/CVE-2005-0588
bugzilla.redhat.com/show_bug.cgi?id=1617545
cve.org/CVERecord?id=CVE-2005-0588
nvd.nist.gov/vuln/detail/CVE-2005-0588
access.redhat.com/security/cve/CVE-2005-0589
bugzilla.redhat.com/show_bug.cgi?id=1617546
cve.org/CVERecord?id=CVE-2005-0589
nvd.nist.gov/vuln/detail/CVE-2005-0589
access.redhat.com/security/cve/CVE-2005-0590
bugzilla.redhat.com/show_bug.cgi?id=1617547
cve.org/CVERecord?id=CVE-2005-0590
nvd.nist.gov/vuln/detail/CVE-2005-0590
access.redhat.com/security/cve/CVE-2005-0591
bugzilla.redhat.com/show_bug.cgi?id=1617548
cve.org/CVERecord?id=CVE-2005-0591
nvd.nist.gov/vuln/detail/CVE-2005-0591
access.redhat.com/security/cve/CVE-2005-0592
bugzilla.redhat.com/show_bug.cgi?id=1617550
cve.org/CVERecord?id=CVE-2005-0592
nvd.nist.gov/vuln/detail/CVE-2005-0592
access.redhat.com/security/cve/CVE-2005-0593
bugzilla.redhat.com/show_bug.cgi?id=1617551
cve.org/CVERecord?id=CVE-2005-0593
nvd.nist.gov/vuln/detail/CVE-2005-0593