CVE-2014-7899
Publication date 19 November 2014
Last updated 24 July 2024
Ubuntu priority
Google Chrome before 38.0.2125.101 allows remote attackers to spoof the address bar by placing a blob: substring at the beginning of the URL, followed by the original URI scheme and a long username string.
Status
Package | Ubuntu Release | Status |
---|---|---|
chromium-browser | ||
14.04 LTS trusty | Not in release | |
oxide-qt | ||
14.04 LTS trusty | Not in release | |
References
Other references
- http://googlechromereleases.blogspot.com/2014/11/stable-channel-update_18.html
- https://chromium.googlesource.com/chromium/src/+/5cfbddc9cc972f5133f26664dbf5810bb569cd04
- https://src.chromium.org/viewvc/chrome?revision=279232&view=revision
- https://code.google.com/p/chromium/issues/detail?id=389734
- https://www.cve.org/CVERecord?id=CVE-2014-7899