VULNERABILITY INTELLIGENCE

CVE-2007-3144

CVSS score6.4 MEDIUM
EPSS probability1.23%
CISA KEVNot currently listed
Published2007-06-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N

Description

Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.

Primary references