6.5
CVE-2017-15420
- EPSS 1.54%
- Veröffentlicht 28.08.2018 19:29:10
- Zuletzt bearbeitet 21.11.2024 03:14:40
- Erkennungen
LoginIncorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Enterprise Linux Desktop Version 6.0
Redhat ≫ Enterprise Linux Server Version 6.0
Redhat ≫ Enterprise Linux Workstation Version 6.0
Debian ≫ Debian Linux Version 8.0
Debian ≫ Debian Linux Version 9.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.54% | 0.716 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.5 | 2.8 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
https://access.redhat.com/errata/RHSA-2017:3401
https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html
https://security.gentoo.org/glsa/201801-03
https://www.debian.org/security/2017/dsa-4064
http://www.securitytracker.com/id/1040282
https://crbug.com/777419
https://www.debian.org/security/2018/dsa-4103