PT-2017-3242 · Google+3 · Google Chrome+3
Publicado
2017-04-19
·
Atualizado
2024-06-15
·
CVE-2017-5060
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 58.0.3029.81 for Mac, Windows, and Linux
Google Chrome version prior to 58.0.3029.83 for Android
Description
The issue is related to insufficient policy enforcement in the Omnibox feature of Google Chrome, allowing a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name. This can be exploited by a remote attacker to deceive users about the actual domain they are visiting.
Recommendations
For Google Chrome versions prior to 58.0.3029.81 on Mac, Windows, and Linux, update to version 58.0.3029.81 or later.
For Google Chrome version prior to 58.0.3029.83 on Android, update to version 58.0.3029.83 or later.
Correção
Incorrect Authorization
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Google Chrome
Opera
Red Hat
Suse