Mozilla · Firefox · CVE-2009-1834
Name of the Vulnerable Software and Affected Versions:
Mozilla Firefox versions prior to 3.0.11
SeaMonkey versions prior to 1.1.17
Description:
A visual truncation issue allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace. This can be achieved by using specific Unicode characters, such as u115A through u115E, which are displayed as whitespace.
Recommendations:
For Mozilla Firefox versions prior to 3.0.11, update to version 3.0.11 or later to resolve the issue.
For SeaMonkey versions prior to 1.1.17, update to version 1.1.17 or later to resolve the issue.