PT-2019-5063

CVE-2019-13739

Published

2019-11-25

Updated

2024-06-15

Description by

CVSS 2.0

7.1

High

MetricsAV:N/AC:M/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.79

Description The issue is related to insufficient policy enforcement in Omnibox, allowing a remote attacker to perform domain spoofing via IDN homographs using a crafted domain name. This can potentially compromise data integrity due to inadequate input validation.

Recommendations For versions prior to 79.0.3945.79, update to version 79.0.3945.79 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Xisigr

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

Related identifiers

CVE-2019-13739