CVE

Id
78573  
CVE No.
CVE-2015-1296  
Status
Candidate  
Description
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a URL, as demonstrated by the omnibox in localizations for right-to-left languages.  
Phase
Assigned (20150121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
717720 78573 CVE-2015-1296 CONFIRM:http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html  View
717721 78573 CVE-2015-1296 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=421332  View
717722 78573 CVE-2015-1296 CONFIRM:https://codereview.chromium.org/1180393003/  View
717723 78573 CVE-2015-1296 CONFIRM:https://codereview.chromium.org/1189553002/  View
717724 78573 CVE-2015-1296 DEBIAN:DSA-3351  View
717725 78573 CVE-2015-1296 URL:http://www.debian.org/security/2015/dsa-3351  View
717726 78573 CVE-2015-1296 GENTOO:GLSA-201603-09  View
717727 78573 CVE-2015-1296 URL:https://security.gentoo.org/glsa/201603-09  View
717728 78573 CVE-2015-1296 REDHAT:RHSA-2015:1712  View
717729 78573 CVE-2015-1296 URL:http://rhn.redhat.com/errata/RHSA-2015-1712.html  View
717730 78573 CVE-2015-1296 SUSE:openSUSE-SU-2015:1873  View
717731 78573 CVE-2015-1296 URL:http://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html  View
717732 78573 CVE-2015-1296 SUSE:openSUSE-SU-2015:1586  View
717733 78573 CVE-2015-1296 URL:http://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html  View
717734 78573 CVE-2015-1296 SECTRACK:1033472  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6106 JVNDB-2015-001426 Aruba Instant のファームウェアにおけるヒープベースのバッファオーバーフローの脆弱性 Aruba Instant (IAP) のファームウェアには、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2015-1348 78573 7.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001426.html  View