CVE-2005-0238

描述

The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

如何修補 CVE-2005-0238

要修補 CVE-2005-0238,請將受影響套件升級到下列已修補版本。

• Debian/epiphany-browser—升級至 1.4.8-2 或更新版本

CVE-2005-0238 正在被利用嗎?

低 — EPSS 為 1.6%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 1.4.8-2

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2005-0238