NVD

Id
20502  
Name
CVE-2016-5163  
Description
The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right (LTR) rendering of URLs, which allows remote attackers to spoof the address bar via crafted right-to-left (RTL) Unicode text, related to omnibox/SuggestionView.java and omnibox/UrlBar.java in Chrome for Android.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-09-11  
Modified Date
2016-11-28  
Seq
2016-5163  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
112298 20502 CVE-2016-5163 openSUSE-SU-2016:2250  View
112299 20502 CVE-2016-5163 SUSE-SU-2016:2251  View
112300 20502 CVE-2016-5163 openSUSE-SU-2016:2296  View
112301 20502 CVE-2016-5163 openSUSE-SU-2016:2349  View
112302 20502 CVE-2016-5163 RHSA-2016:1854  View
112303 20502 CVE-2016-5163 DSA-3660  View
112304 20502 CVE-2016-5163 92717  View
112305 20502 CVE-2016-5163 https://codereview.chromium.org/1988553002  View
112306 20502 CVE-2016-5163 https://crbug.com/495933  View
112307 20502 CVE-2016-5163 https://crbug.com/609680  View
112308 20502 CVE-2016-5163 https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3840 JVNDB-2016-004613 Google Chrome の双方向テキストの実装におけるアドレスバーを偽装される脆弱性 Google Chrome の双方向テキストの実装は、URL の左横書き (LTR) のレンダリングを確認しないため、アドレスバーを偽装される脆弱性が存在します。 CVE-2016-5163 91669 CVE-2016-5163 20502 4.3 4.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004613.html 2016-08-31 2016-11-18 View