Beveiligingsadvies

CVE-2016-1707

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-07-23 19:00:00
Laatst bijgewerkt 2024-08-05 23:02:13
Toegewezen door Chrome
CVSS-score geen score
Status PUBLISHED

Beschrijving

ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL, which allows remote attackers to spoof the URL display via a crafted web site.