PT-2019-1512 · Google+3 · Google Chrome+3
Lnyas Zhang
·
Publicado
2019-01-29
·
Atualizado
2024-06-15
·
CVE-2019-5776
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 72.0.3626.81
Description
The issue is related to incorrect handling of a confusable character in the Omnibox component of Google Chrome, allowing a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. This can lead to the attacker manipulating the address displayed in the URL bar.
Recommendations
For versions prior to 72.0.3626.81, update to version 72.0.3626.81 or later to resolve the issue. As a temporary workaround, consider being cautious when clicking on links from untrusted sources and verify the authenticity of websites by checking the URL bar carefully. Restrict access to potentially malicious domains to minimize the risk of exploitation.
Exploit
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Red Hat
Suse