IDN Homograph Vulnerability in Open Whisper Systems Signal Applications
CVE-2019-9970

6.5MEDIUM

Key Information:

Vendor

Signal

Status
Signal-desktop
Private Messenger
Vendor
CVE Published:
24 March 2019

What is CVE-2019-9970?

The IDN homograph vulnerability found in Open Whisper Systems' Signal applications allows attackers to exploit the rendering of clickable links. Messages containing URLs may display misleading links when different character sets, such as Latin and Cyrillic, are used together in a domain name. This vulnerability poses a risk as users may unknowingly click on fraudulent links leading to malicious sites.

References

http://www.securityfocus.com/bid/107550
vdb-entryx_refsource_BID
https://github.com/blazeinfosec/advisories/blob/master/si...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.