IDN Homograph Vulnerability in Open Whisper Systems Signal Applications
CVE-2019-9970

6.5MEDIUM

Key Information:

Vendor

Signal

Status
Signal-desktop
Private Messenger
Vendor
CVE Published:
24 March 2019

What is CVE-2019-9970?

The IDN homograph vulnerability found in Open Whisper Systems' Signal applications allows attackers to exploit the rendering of clickable links. Messages containing URLs may display misleading links when different character sets, such as Latin and Cyrillic, are used together in a domain name. This vulnerability poses a risk as users may unknowingly click on fraudulent links leading to malicious sites.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securityfocus.com/bid/107550
vdb-entryx_refsource_BID
https://github.com/blazeinfosec/advisories/blob/master/si...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.