Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-1723

Опубликовано: 09 апр. 2014
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 7.5

Описание

The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers (IRIs), which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left (RTL) Unicode text.

РелизСтатусПримечание
devel

not-affected

34.0.1847.116-0ubuntu2
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [34.0.1847.116-0ubuntu2]]
lucid

ignored

end of life
precise

released

34.0.1847.116-0ubuntu~1.12.04.0~pkg884
quantal

released

34.0.1847.116-0ubuntu~1.12.10.0~pkg900
saucy

released

34.0.1847.116-0ubuntu~1.13.10.0~pkg991
trusty

not-affected

34.0.1847.116-0ubuntu2
trusty/esm

DNE

trusty was not-affected [34.0.1847.116-0ubuntu2]
upstream

released

34.0.1847.116

Показывать по

РелизСтатусПримечание
devel

not-affected

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected]
lucid

DNE

precise

DNE

quantal

DNE

saucy

DNE

trusty

not-affected

trusty/esm

DNE

trusty was not-affected
upstream

not-affected

Показывать по

EPSS

Процентиль: 78%
0.01207
Низкий

7.5 High

CVSS2

Связанные уязвимости

nvd
около 11 лет назад

The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers (IRIs), which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left (RTL) Unicode text.

debian
около 11 лет назад

The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Googl ...

github
около 3 лет назад

The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers (IRIs), which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left (RTL) Unicode text.

fstec
около 11 лет назад

Уязвимость браузера Google Chrome, позволяющая злоумышленнику подменить URL-адреса

EPSS

Процентиль: 78%
0.01207
Низкий

7.5 High

CVSS2