CVE-2014-3159

The WebContentsDelegateAndroid::OpenURLFromTab function in components/webcontentsdelegateandroid/webcontentsdelegateandroid.cc in Google Chrome before 36.0.1985.122 on Android does not properly restrict URL loading, which allows remote attackers to spoof the URL in the Omnibox via unspecified...