PT-2007-2247 · Mozilla+1 · Firefox+1

Kaneda · Published 2007-02-07 · Updated 2022-02-26 · CVE-2007-0802

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 2.0.0.1

Description The issue allows remote attackers to bypass the Phishing Protection mechanism by adding certain characters to the end of the domain name. This can be achieved by using characters such as the "." and "/" at the end of the domain, which are not properly filtered by the Phishing List blacklist.

Recommendations For Mozilla Firefox version 2.0.0.1, consider updating to a newer version that addresses this issue, as the current version allows attackers to bypass phishing protections by manipulating domain names.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-0802

Affected Products

Firefox

Opera

References · 7

• 🔥 http://kaneda.bohater.net/security/20070111-firefox_2.0.0.1_bypass_phishing_protection.php · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0802 · Security Note
• http://securityfocus.com/archive/1/459265/100/0/threaded · Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=367538 · Note
• http://osvdb.org/33705 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0516.html · Note
• http://securityfocus.com/archive/1/archive/1/459265/100/0/threaded · Note