PT-2019-4554 · Mozilla+3 · Firefox+3
U543083
·
Publicado
2019-07-11
·
Atualizado
2024-12-12
·
CVE-2019-11721
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 68
Description
The issue is related to an error in encoding the Latin symbol 'kra', which can be used to substitute the standard 'k' symbol in the address bar. This can lead to domain spoofing attacks, as the symbol does not display as punycode text, potentially causing user confusion.
Recommendations
For versions prior to 68, update to version 68 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the
kra symbol in the address bar until the update is applied. Restrict access to potentially spoofed domains to minimize the risk of exploitation.Exploit
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Firefox
Suse
Ubuntu