The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Software | From | Fixed in |
---|---|---|
mozilla / mozilla | - | 1.6.x |
opera / opera_browser | - | 7.54.x |
mozilla / camino | 0.8.5 | 0.8.5.x |
omnigroup / omniweb | 5 | 5.x |
gnome / epiphany | - | - |