Description
URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-800-1 | firefox-esr security update |
Debian DLA |
DLA-896-1 | icedove/thunderbird security update |
Debian DSA |
DSA-3771-1 | firefox-esr security update |
Debian DSA |
DSA-3832-1 | icedove security update |
EUVD |
EUVD-2017-14487 | URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51. |
Ubuntu USN |
USN-3165-1 | Thunderbird vulnerabilities |
Ubuntu USN |
USN-3175-1 | Firefox vulnerabilities |
References
History
Tue, 25 Nov 2025 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | ||
| Vendors & Products |
Mozilla firefox Esr
|
Subscriptions
Debian
Subscribe
Debian Linux
Subscribe
Mozilla
Subscribe
Firefox
Subscribe
Thunderbird
Subscribe
Redhat
Subscribe
Enterprise Linux
Subscribe
Enterprise Linux Desktop
Subscribe
Enterprise Linux Server
Subscribe
Enterprise Linux Server Aus
Subscribe
Enterprise Linux Server Eus
Subscribe
Enterprise Linux Workstation
Subscribe
Status: PUBLISHED
Assigner: mozilla
Published:
Updated: 2024-08-05T14:55:35.810Z
Reserved: 2017-01-13T00:00:00.000Z
Link: CVE-2017-5383
No data.
Status : Modified
Published: 2018-06-11T21:29:03.170
Modified: 2025-11-25T17:50:16.803
Link: CVE-2017-5383
OpenCVE Enrichment
No data.
Weaknesses
Debian DLA
Debian DSA
EUVD
Ubuntu USN