Security Advisory

CVE-2019-9970

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-03-24 01:52:33

Last updated 2024-08-04 22:10:08

Assigner mitre

State PUBLISHED

Description

Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger application through 4.35.3 for Android are vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces a clickable link even if (for example) Latin and Cyrillic characters exist in the same domain name, and the available font has an identical representation of characters from different alphabets.

← Browse all CVEs View on cve.org ↗