CVE-2005-0237
The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote...
The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Exploit likelihood
What each source reports
NVD Score used
The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
- Record
CVE-2005-0237- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
- Record
CVE-2005-0237- Updated
- 2026-11-02
EUVDEUVD-2005-0238 No score
The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
- Record
EUVD-2005-0238- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3jm2-5rf3-c2fc No score
The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote...
The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
- Record
GHSA-3jm2-5rf3-c2fc- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kdelibsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 6:3.3.1-3.6 | 6:3.3.1-3.6 |
kdelibs-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 6:3.3.1-3.6 | 6:3.3.1-3.6 |
kdelibs-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 6:3.3.1-3.6 | 6:3.3.1-3.6 |
kdelibsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 6:3.3.1-3.6 | 6:3.3.1-3.6 |
kdelibs-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 6:3.3.1-3.6 | 6:3.3.1-3.6 |
kdelibs-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 6:3.3.1-3.6 | 6:3.3.1-3.6 |
kdelibsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 6:3.3.1-3.6 | 6:3.3.1-3.6 |
kdelibs-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 6:3.3.1-3.6 | 6:3.3.1-3.6 |
kdelibs-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 6:3.3.1-3.6 | 6:3.3.1-3.6 |
kdelibsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 6:3.3.1-3.6 | 6:3.3.1-3.6 |
kdelibs-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 6:3.3.1-3.6 | 6:3.3.1-3.6 |
kdelibs-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 6:3.3.1-3.6 | 6:3.3.1-3.6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0237 is a medium vulnerability (CVSS 5.0) in Kde, published February 7, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.63%, the 76th percentile. No source names a fixed version.
References
shmoo.com/idn/homograph.txt
exchange.xforce.ibmcloud.com/vulnerabilities/19236
lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html
kde.org/info/security/advisory-20050316-2.txt
Show 27 moreShow less
securityfocus.com/archive/1/427976/100/0/threaded
mandriva.com/security/advisories?name=MDKSA-2005:058
secunia.com/advisories/14162
redhat.com/support/errata/RHSA-2005-325.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10671
nvd.nist.gov/vuln/detail/CVE-2005-0237
github.com/advisories/GHSA-3jm2-5rf3-c2fc
access.redhat.com/errata/RHSA-2005:325
bugzilla.redhat.com/show_bug.cgi?id=147405
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_325.json
cve.org/CVERecord?id=CVE-2005-0237