CVE-2017-5110

2017-10-27T05:29:00
ID CVE-2017-5110
Type cve
Reporter cve@mitre.org
Modified 2018-01-05T02:31:00

Description

Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.