Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-17472

Опубликовано: 14 нояб. 2018
Источник: debian

Описание

Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the <iframe> sandbox via a crafted HTML page.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
chromium-browserfixed70.0.3538.67-1package
chromium-browserend-of-lifejessiepackage

Связанные уязвимости

CVSS3: 9.6
ubuntu
около 7 лет назад

Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the <iframe> sandbox via a crafted HTML page.

CVSS3: 6.5
redhat
больше 7 лет назад

Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the <iframe> sandbox via a crafted HTML page.

CVSS3: 9.6
nvd
около 7 лет назад

Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the <iframe> sandbox via a crafted HTML page.

CVSS3: 9.6
github
больше 3 лет назад

Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the <iframe> sandbox via a crafted HTML page.

suse-cvrf
больше 7 лет назад

Security update for Chromium