Google Chrome before 11.0.696.57 allows user-assisted remote attackers to spoof the URL bar via vectors involving a redirect and a manual reload.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Link | Tags |
---|---|
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14759 | vdb entry third party advisory signature |
http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html | vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/67159 | vdb entry third party advisory |
http://code.google.com/p/chromium/issues/detail?id=77786 | issue tracking patch vendor advisory exploit |