CVE-2019-10044

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.28%

Published

Mar 25, 2019

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces a clickable link even if (for example) Latin and Cyrillic characters exist in the same domain name, and the available font has an identical representation of characters from different alphabets.

Affected Products (3)

telegram · telegramvulnerable

telegram · telegram_desktop (up to 1.5.12)vulnerable

microsoft · windows

References (4)

http://www.securityfocus.com/bid/107610

Third Party AdvisoryVDB Entry

https://github.com/blazeinfosec/advisories/blob/master/telegram-advisory.txt

ExploitThird Party Advisory

http://www.securityfocus.com/bid/107610

Third Party AdvisoryVDB Entry

https://github.com/blazeinfosec/advisories/blob/master/telegram-advisory.txt

ExploitThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs