PT-2018-17319 · Google+4 · Google Chrome+4
Khalil Zhani
·
Publicado
2018-01-24
·
Atualizado
2024-06-15
·
CVE-2018-6042
CVSS v3.1
4.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 64.0.3282.119
Description
The issue concerns an incorrect security UI in the Omnibox, which is the URL bar in Google Chrome. This allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page. The same issue affects Opera, indicating a potential problem with how the Omnibox (or its equivalent) handles security in these browsers.
Recommendations
For Google Chrome versions prior to 64.0.3282.119, update to version 64.0.3282.119 or later to resolve the issue.
For Opera, consider restricting access to potentially malicious HTML pages until a fix is available. As a temporary workaround, consider disabling the rendering of external HTML pages in the address bar to minimize the risk of exploitation.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Opera
Red Hat
Suse