CVE ID:	CVE-2009-0777
Description:	Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be displayed and makes it easier for remote attackers to spoof URLs and conduct phishing attacks.
Test IDs:	1.3.6.1.4.1.25623.1.0.63528   1.3.6.1.4.1.25623.1.0.63529
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0777 BugTraq ID: 33990 http://www.securityfocus.com/bid/33990 http://www.mandriva.com/security/advisories?name=MDVSA-2009:075 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11222 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6039 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6157 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6229 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7435 RedHat Security Advisories: RHSA-2009:0315 http://www.redhat.com/support/errata/RHSA-2009-0315.html http://securitytracker.com/alerts/2009/Mar/1021799.html http://secunia.com/advisories/34140 http://secunia.com/advisories/34145 http://secunia.com/advisories/34272 SuSE Security Announcement: SUSE-SA:2009:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html http://www.vupen.com/english/advisories/2009/0632 XForce ISS Database: mozilla-invisible-url-spoofing(49087) https://exchange.xforce.ibmcloud.com/vulnerabilities/49087