CVE-2021-43533

Summary

When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to user confusion or attacks such as phishing. This vulnerability affects Firefox < 94.

Affected Software

Weaknesses

• URL Parsing may incorrectly parse internationalized domains

ADP Enrichment

CVE Program Container

Additional References

• https://www.mozilla.org/security/advisories/mfsa2021-48/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1724233

References

• https://www.mozilla.org/security/advisories/mfsa2021-48/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1724233

• ←Previous
• Next→