CVE-2018-6041

Incorrect security UI in navigation in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
References
Link Resource
https://crbug.com/760342 Exploit Issue Tracking Patch Third Party Advisory
https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html Vendor Advisory
https://www.debian.org/security/2018/dsa-4103 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0265 Third Party Advisory
http://www.securitytracker.com/id/1040282 Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/102797 Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Information

Published : 2018-09-25 07:29

Updated : 2018-11-15 10:40


NVD link : CVE-2018-6041

Mitre link : CVE-2018-6041


JSON object : View

CWE
CWE-20

Improper Input Validation

Advertisement

dedicated server usa

Products Affected

redhat

  • enterprise_linux_desktop
  • enterprise_linux_workstation
  • enterprise_linux_server

google

  • chrome

debian

  • debian_linux