Security Advisory

CVE-2017-5110

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-10-27 05:00:00
Last updated 2024-08-05 14:47:44
Assigner Chrome
CVSS score not scored
State PUBLISHED

Description

Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.