CVE-2017-5110

CVE-2017-5110

EPSS 1.4%

Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.

Affected products

n/a · Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://access.redhat.com/errata/RHSA-2017:1833 https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html https://crbug.com/717476 https://security.gentoo.org/glsa/201709-15 http://www.debian.org/security/2017/dsa-3926 http://www.securityfocus.com/bid/99950