CVE-2016-1707

2016-07-23T19:59:00
ID CVE-2016-1707
Type cve
Reporter cve@mitre.org
Modified 2017-09-01T01:29:00

Description

ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL, which allows remote attackers to spoof the URL display via a crafted web site.