Vulnerability Database

323,116

Total vulnerabilities in the database

CVE-2007-1762

Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against the phishing site blacklist, which allows remote attackers to bypass phishing protection via multiple / (slash) characters in the URL.

Published: Mar 30, 2007
Updated: Nov 9, 2025
CVE: CVE-2007-1762
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
mozilla / firefox	2.0.0.2	2.0.0.2.x
mozilla / firefox	2.0.0.3	2.0.0.3.x
mozilla / firefox	2.0.0.1	2.0.0.1.x

http://osvdb.org/34535
http://www.securityfocus.com/archive/1/464149/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/33486

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo