PT-2017-14066
CVE-2017-15420
·
Publicado
2017-12-06
·
Atualizado
2024-06-15
Descrição por
CVSS 3.1
6.5
MédiaMétricasAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 63.0.3239.84
Google Chrome versions prior to 64.0.3282.119
Description
The issue is related to incorrect handling of back navigations in error pages in browser navigation, allowing a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. This can be achieved by using a specially formed HTML page.
Recommendations
For Google Chrome versions prior to 63.0.3239.84, update to version 63.0.3239.84 or later.
For Google Chrome versions prior to 64.0.3282.119, update to version 64.0.3282.119 or later.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾