What’s Vulnerable › Vulnerabilities

CVE-2005-0235

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-05-02 · updated 2026-06-16

Description

The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

Affected products

• Opera Browser: through 7.54

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html
• http://marc.info/?l=bugtraq&m=110782704923280&w=2
• http://www.novell.com/linux/security/advisories/2005_31_opera.html
• http://www.securityfocus.com/bid/12461
• http://www.shmoo.com/idn
• http://www.shmoo.com/idn/homograph.txt
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19236
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html
• http://marc.info/?l=bugtraq&m=110782704923280&w=2
• http://www.novell.com/linux/security/advisories/2005_31_opera.html
• http://www.securityfocus.com/bid/12461
• http://www.shmoo.com/idn

Get alerted when CVE-2005-0235 or the next vulnerability affects your stack