PT-2018-3246 · Google+3 · Google Chrome+3
Khalil Zhani
·
Publicado
2018-05-29
·
Atualizado
2024-06-15
·
CVE-2018-6133
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 67.0.3396.62
Description
The issue is related to incorrect handling of data, specifically confusable characters in the URL Formatter. This can allow a remote attacker to perform domain spoofing via IDN homographs by using a crafted domain name. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
Recommendations
For Google Chrome versions prior to 67.0.3396.62, update to version 67.0.3396.62 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable domains to minimize the risk of exploitation. Avoid using crafted domain names that could be used for IDN homograph attacks until the issue is resolved.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Red Hat
Suse