PT-2019-5063

CVE-2019-13739

Publicado

2019-11-25

Atualizado

2024-06-15

Descrição por

CVSS 2.0

7.1

Alta

MétricasAV:N/AC:M/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.79

Description The issue is related to insufficient policy enforcement in Omnibox, allowing a remote attacker to perform domain spoofing via IDN homographs using a crafted domain name. This can potentially compromise data integrity due to inadequate input validation.

Recommendations For versions prior to 79.0.3945.79, update to version 79.0.3945.79 or later to resolve the issue.

Explorabilidade

Correção

Impactos

Pesquisadores

Xisigr

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-20: Improper Input Validation

Identificadores relacionados

CVE-2019-13739