NVD

Id
18057  
Name
CVE-2016-1707  
Description
ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL, which allows remote attackers to spoof the URL display via a crafted web site.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-07-23  
Modified Date
2016-11-28  
Seq
2016-1707  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
99423 18057 CVE-2016-1707 http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html  View
99424 18057 CVE-2016-1707 openSUSE-SU-2016:1865  View
99425 18057 CVE-2016-1707 openSUSE-SU-2016:1868  View
99426 18057 CVE-2016-1707 openSUSE-SU-2016:1869  View
99427 18057 CVE-2016-1707 openSUSE-SU-2016:1918  View
99428 18057 CVE-2016-1707 DSA-3637  View
99429 18057 CVE-2016-1707 92053  View
99430 18057 CVE-2016-1707 https://codereview.chromium.org/2086333003  View
99431 18057 CVE-2016-1707 https://crbug.com/622183  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3225 JVNDB-2016-003998 Apple iOS 上で稼動する Google Chrome の ios/web/web_state/ui/crw_web_controller.mm における URL 表示を偽造される脆弱性 Apple iOS 上で稼動する Google Chrome の ios/web/web_state/ui/crw_web_controller.mm は、無効な URL が about:blank URL に置換されていることを確認しないため、URL 表示を偽造される脆弱性が存在します。 CVE-2016-1707 88213 CVE-2016-1707 18057 4.3 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003998.html 2016-07-20 2016-07-28 View