1082
Reference Description
CVE-2002-0197 Visual distinction: Chat client allows remote attackers to spoof encrypted,
trusted messages with lines that begin with a special sequence, which makes
the message appear legitimate.
https://www.cve.org/CVERecord?id=CVE-2002-0197
CVE-2005-0831 Visual distinction: Product allows spoofing names of other users by registering
with a username containing hex-encoded characters.
https://www.cve.org/CVERecord?id=CVE-2005-0831
CVE-2003-1025 Visual truncation: Special character in URL causes web browser to truncate
the user portion of the "user@domain" URL, hiding real domain in the address
bar.
https://www.cve.org/CVERecord?id=CVE-2003-1025
CVE-2005-0243 Visual truncation: Chat client does not display long filenames in file dialog
boxes, allowing dangerous extensions via manipulations including (1) many
spaces and (2) multiple file extensions.
https://www.cve.org/CVERecord?id=CVE-2005-0243
CVE-2005-1575 Visual truncation: Web browser file download type can be hidden using
whitespace.
https://www.cve.org/CVERecord?id=CVE-2005-1575
CVE-2004-2530 Visual truncation: Visual truncation in chat client using whitespace to hide
dangerous file extension.
https://www.cve.org/CVERecord?id=CVE-2004-2530
CVE-2005-0590 Visual truncation: Dialog box in web browser allows user to spoof the
hostname via a long "user:pass" sequence in the URL, which appears before
the real hostname.
https://www.cve.org/CVERecord?id=CVE-2005-0590
CVE-2004-1451 Visual truncation: Null character in URL prevents entire URL from being
displayed in web browser.
https://www.cve.org/CVERecord?id=CVE-2004-1451
CVE-2004-2258 Miscellaneous -- [step-based attack, GUI] -- Password-protected tab can be
bypassed by switching to another tab, then back to original tab.
https://www.cve.org/CVERecord?id=CVE-2004-2258
CVE-2005-1678 Miscellaneous -- Dangerous file extensions not displayed.
https://www.cve.org/CVERecord?id=CVE-2005-1678
CVE-2002-0722 Miscellaneous -- Web browser allows remote attackers to misrepresent the
source of a file in the File Download dialog box.
https://www.cve.org/CVERecord?id=CVE-2002-0722
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 884 CWE Cross-section 884 2567
MemberOf 995 SFP Secondary Cluster: Feature 888 2418
MemberOf 1348 OWASP Top Ten 2021 Category A04:2021 - Insecure
Design
1344 2491
MemberOf 1379 ICS Operations (& Maintenance): Human factors in ICS
environments
1358 2514
MemberOf 1412 Comprehensive Categorization: Poor Coding Practices 1400 2538
Notes
Maintenance
CWE Version 4.14
CWE-453: Insecure Default Variable Initialization
CWE-453: Insecure Default Variable Initialization