CVE-2013-1699

Published: Jun 26, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Internationalized Domain Name (IDN) display algorithm in Mozilla Firefox before 22.0 does not properly handle the .com, .name, and .net top-level domains, which allows remote attackers to spoof the address bar via unspecified homograph characters.

Affected (6)

Products: Mozilla: Firefox

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 21.0
Mozilla Firefox	Version 19.0.1
Mozilla Firefox	Version 19.0.2
Mozilla Firefox	Version 19.0
Mozilla Firefox	Version 20.0.1
Mozilla Firefox	Version 20.0

Related CWEs

References (10)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html

Source: security@mozilla.org

http://www.mozilla.org/security/announce/2013/mfsa2013-61.html

Source: security@mozilla.org

Vendor Advisory

http://www.ubuntu.com/usn/USN-1890-1

Source: security@mozilla.org

https://bugzilla.mozilla.org/show_bug.cgi?id=840882

Source: security@mozilla.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17296

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/2013/mfsa2013-61.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.ubuntu.com/usn/USN-1890-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=840882

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17296

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.