VDB
GHSA-m6fm-xwqg-f4r6
GHSA-m6fm-xwqg-f4r6
PUBLISHED
Record from GitHub Advisory Database · Published May 2, 2022
Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the \u115A through \u115E characters.
Timeline
- May 2, 2022 CVE Published
- Apr 9, 2026 Distribution Patch
- Apr 30, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-m6fm-xwqg-f4r6
vulnetix vdb fixes GHSA-m6fm-xwqg-f4r6Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-m6fm-xwqg-f4r6/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2009-1834 advisory
- http://osvdb.org/55162 url
- http://secunia.com/advisories/35331 url
- http://secunia.com/advisories/35415 url
- http://secunia.com/advisories/35431 url
- http://secunia.com/advisories/35439 url
- https://bugzilla.mozilla.org/show_bug.cgi?id=479413 url
- https://bugzilla.redhat.com/show_bug.cgi?id=503573 url
- https://rhn.redhat.com/errata/RHSA-2009-1095.html url
- http://secunia.com/advisories/35468 url
- http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468 url
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 url
- http://www.debian.org/security/2009/dsa-1820 url
- http://www.mozilla.org/security/announce/2009/mfsa2009-25.html url
- http://www.securityfocus.com/bid/35326 url
- http://www.securityfocus.com/bid/35388 url
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10436 url
- https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html url
- https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html url
- http://www.vupen.com/english/advisories/2009/1572 url