CVE catalog
CVE-2005-0238
epiphany-browser: CVE-2005-0238
- Severity
- Medium
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.55% · Oct 25, 2026
The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | epiphany-browser | sid | 51.1-1 | fixed |
| Debian | epiphany-browser | forky | 51.1-1 | fixed |
| Debian | epiphany-browser | trixie | 48.5-0+deb13u1 | fixed |
| Debian | epiphany-browser | bookworm | 43.1-1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | epiphany-browser | source | sid | 1.4.8-2 | not yet assigned | Not reported | Not reported |
| Debian | epiphany-browser | source | forky | 1.4.8-2 | not yet assigned | Not reported | Not reported |
| Debian | epiphany-browser | source | trixie | 1.4.8-2 | not yet assigned | Not reported | Not reported |
| Debian | epiphany-browser | source | bookworm | 1.4.8-2 | not yet assigned | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [epiphany-browser]Fixed
Details (2)
43.1-1· amd64 · bookwormFixed · Fixed:
1.4.8-2dsa · epiphany-browser · debian · bookworm; dsa · epiphany-browser · debian · 12
43.1-1· arm64 · bookwormFixed · Fixed:
1.4.8-2dsa · epiphany-browser · debian · bookworm; dsa · epiphany-browser · debian · 12
- [epiphany-browser-data]Fixed
Source package: [epiphany-browser]
Details (2)
43.1-1· all · bookwormFixed · Fixed:
1.4.8-2dsa · epiphany-browser · debian · bookworm; dsa · epiphany-browser · debian · 12
43.1-1· all · bookwormFixed · Fixed:
1.4.8-2dsa · epiphany-browser · debian · bookworm; dsa · epiphany-browser · debian · 12
[Debian 13 (Trixie)]
- [epiphany-browser]Fixed
Details (2)
48.5-0+deb13u1· amd64 · trixieFixed · Fixed:
1.4.8-2dsa · epiphany-browser · debian · 13
48.5-0+deb13u1· arm64 · trixieFixed · Fixed:
1.4.8-2dsa · epiphany-browser · debian · 13
- [epiphany-browser-data]Fixed
Source package: [epiphany-browser]
Details (2)
48.5-0+deb13u1· all · trixieFixed · Fixed:
1.4.8-2dsa · epiphany-browser · debian · 13
48.5-0+deb13u1· all · trixieFixed · Fixed:
1.4.8-2dsa · epiphany-browser · debian · 13
Observed: