PT-2017-14066
CVE-2017-15420
·
Published
2017-12-06
·
Updated
2024-06-15
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 63.0.3239.84
Google Chrome versions prior to 64.0.3282.119
Description
The issue is related to incorrect handling of back navigations in error pages in browser navigation, allowing a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. This can be achieved by using a specially formed HTML page.
Recommendations
For Google Chrome versions prior to 63.0.3239.84, update to version 63.0.3239.84 or later.
For Google Chrome versions prior to 64.0.3282.119, update to version 64.0.3282.119 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾