PT-2018-5807

CVE-2017-15389

·

Published

2017-10-20

·

Updated

2024-06-15

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 62.0.3202.62
Description: The issue is related to an insufficient watchdog timer in navigation, allowing a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. This could be achieved by manipulating an HTML page.
Recommendations: For versions prior to 62.0.3202.62, update to version 62.0.3202.62 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2017-15389
ALT-PU-2017-2600
DSA-4020-1
MGASA-2017-0423
OPENSUSE-SU-2017_2902-1
OPENSUSE-SU-2017:3245-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2017:2997
RHSA-2017_2997
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com