The vulnerability of the Omnibox implementation in Google Chrome, related to insufficient validation of input data, allows a hacker to perform domain hijacking.

The vulnerability of the Omnibox browser implementation by Google Chrome is related to insufficient validation of entered data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to replace a domain name using a specially crafted domain name...

The vulnerability in the Omnibox browser implementation of Google Chrome allows a hacker to replace the domain name.

The vulnerability of the Omnibox browser implementation by Google Chrome is related to insufficient compliance with security policies. Exploiting this vulnerability allows a malicious actor to perform domain substitution using a specially crafted domain name, which includes IDN Internationalized...

The vulnerability in the Omnibox browser implementation of Google Chrome allows a hacker to perform domain substitution attacks.

The vulnerability of the Omnibox browser implementation by Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform domain substitution remotely, using a specially created domain name containing the symbol “U+0620”...

openSUSE Security Update : chromium (openSUSE-2017-1349)

This update to Chromium 63.0.3239.84 fixes the following security issues : - CVE-2017-15408: Heap buffer overflow in PDFium - CVE-2017-15409: Out of bounds write in Skia - CVE-2017-15410: Use after free in PDFium - CVE-2017-15411: Use after free in PDFium - CVE-2017-15412: Use after free in libXM...

Debian DSA-4064-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2017-15407 Ned Williamson discovered an out-of-bounds write issue. - CVE-2017-15408 Ke Liu discovered a heap overflow issue in the pdfium library. - CVE-2017-15409 An out-of-bounds write issue was discovered in the sk...

Security update for chromium (important)

This update to Chromium 63.0.3239.84 fixes the following security issues: - CVE-2017-5124: UXSS with MHTML - CVE-2017-5125: Heap overflow in Skia - CVE-2017-5126: Use after free in PDFium - CVE-2017-5127: Use after free in PDFium - CVE-2017-5128: Heap overflow in WebGL - CVE-2017-5129: Use after...

Security update for chromium (important)

This update to Chromium 63.0.3239.84 fixes the following security issues: - CVE-2017-15408: Heap buffer overflow in PDFium - CVE-2017-15409: Out of bounds write in Skia - CVE-2017-15410: Use after free in PDFium - CVE-2017-15411: Use after free in PDFium - CVE-2017-15412: Use after free in libXML...

chromium-browser: url spoofing in omnibox

Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

chromium-browser: url spoof in omnibox

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...

chromium-browser: url spoof in omnibox

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...

chromium-browser: heap buffer overflow in pdfium

Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium...

chromium-browser: url spoof in omnibox

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...

chromium-browser: insufficient blocking of javascript in omnibox

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar...

CVE-2017-15408

Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium...

CVE-2017-15420

Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2017-15427

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar...

PT-2018-5813

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 63.0.3239.84 Description: The issue is related to insufficient policy enforcement in Omnibox, allowing a socially engineered user to perform a self-XSS attack by dragging and dropping a javascript: URL into the...

PT-2017-14056

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description A heap buffer overflow issue in the Omnibox component of Google Chrome and Opera, related to the handling of PDF files by PDFium, allows a remote...

PT-2017-14066

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Google Chrome versions prior to 64.0.3282.119 Description The issue is related to incorrect handling of back navigations in error pages in browser navigation, allowing a remote attacker to spoof the...

PT-2017-14069

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description The issue is related to insufficient policy enforcement in the Omnibox feature, allowing a remote attacker to perform domain spoofing via IDN...