Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Gecko-Based Browsers: Spoofing Flaw Risks Identity Theft

Calendar Feb 09, 2005 • User Avatar Benjamin D. Thomas
1 min read
General Esm H446
Topics%20covered

Topics Covered

security advisory identity theft browser exploit spoofing flaw gecko kernel
The flaw affects a broad range of browsers that use the open-source Gecko browser kernel. Anyone using Firefox, Safari, or the like, could be visiting spoofed sites without realizing it. Since some phishing scams rely on fake sites to collect personal information, users could be opening themselves up to identity theft.

The spoofing flaw arises from the way that browsers handle Web addresses that include international characters in International Domain Name URLs. The flaw can be exploited by registering domain names with international characters that resemble more commonly used characters. For example, a zero can be put in place of the letter "O" leading to the registration of "Micr0s0ft.com."