CVE-2007-3144: Mozilla

Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days.

Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.

Affected products

• Mozilla Mozilla: version 1.7.12 only

Published 2007-06-11. Last modified 2026-06-16.