VDB
CVE-2019-10044
CVE-2019-10044
PUBLISHED
Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces a clickable link even if (for example) Latin and Cyrillic characters exist in the same domain name, and the available font has an identical representation of characters from different alphabets.
EPSS 0.76% · 73.8th percentile
Risk Scores
EPSS Score
0.76%
73.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | telegram-desktop | 0, 1.1.23-1, 1.1.23-1build1 |
Exploit Intelligence
Timeline
- Mar 25, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Nov 6, 2022 EPSS Score
References
- https://ubuntu.com/security/CVE-2019-10044 third-party-advisory
- https://github.com/blazeinfosec/advisories/blob/master/telegram-advisory.txt third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2019-10044 third-party-advisory