Firefox - Idn Spoofing Issue

[Flatiron]

IDN Spoofing Issue - MozillaZine Forums

Also here

[iDN spoofing vulnerability: temporary fix (works 100%) - MozillaZine Forums

A more clear description of what you need to do:

1. Find your profile. The location varies with operating system:

Windows XP/2000: C:\Documents and Settings\[user Name]\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\

Windows NT: C:\WINNT\Profiles\[userName]\Application Data\Mozilla\Firefox\xxxxxxxx.default\

Windows 95/98/Me: C:\Windows\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\

Windows 95/98/Me(with user logon): C:\Windows\Profiles\[userName]\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\

Linux: ~/.mozilla/firefox/xxxxxxxx.default/

MacOS X: ~/Library/Application Support/Firefox/xxxxxxxx.default/

MacOS X (alternate): ~/Library/Mozilla/Firefox/Profiles/<Profile name>/

xxxxxxxx is a string of 8 random letters/numbers. You may need to enable the viewing of hidden files/folders to find it.

2. Back up the file 'compreg.dat'

3. Right-click on the file 'compreg.dat' and open it with a text editing program - something more advanced that notepad, like wordpad.

4. Use the Find command to search for IDN. Add a # to the beginning of every line containing the text IDN

5. Save the file and exit, and restart Firefox.

This worked for me. I have two other profiles also, so I had to

change them too.

-------------------------------------------------------------------------------

Neowin.net - A Browser Exploit That Doesn't Affect IE - Shocks The World

Type about:config on address bar -> Type idn on Filter: -> Double click network.enableIDN(set to False).

This did not work for me.