Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
References
| Link | Resource |
|---|---|
| https://crbug.com/1010765 | Permissions Required |
| https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html | Vendor Advisory |
| https://access.redhat.com/errata/RHSA-2019:4238 | Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html | Broken Link |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2Z5M4FPUMDNX2LDPHJKN5ZV5GIS2AKNU/ | Mailing List Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html | Broken Link |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/ | Mailing List Third Party Advisory |
| https://seclists.org/bugtraq/2020/Jan/27 | Mailing List Third Party Advisory |
| https://www.debian.org/security/2020/dsa-4606 | Third Party Advisory |
| https://security.gentoo.org/glsa/202003-08 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
04 Feb 2023, 00:08
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:x64:* cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:x86:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:x64:* cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:x86:* cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:x86:* cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:x64:* cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:x64:* cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:x86:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
|
| References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2Z5M4FPUMDNX2LDPHJKN5ZV5GIS2AKNU/ - Mailing List, Third Party Advisory | |
| References | (BUGTRAQ) https://seclists.org/bugtraq/2020/Jan/27 - Mailing List, Third Party Advisory | |
| References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/ - Mailing List, Third Party Advisory | |
| References | (REDHAT) https://access.redhat.com/errata/RHSA-2019:4238 - Third Party Advisory | |
| References | (DEBIAN) https://www.debian.org/security/2020/dsa-4606 - Third Party Advisory | |
| References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html - Broken Link | |
| References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html - Broken Link | |
| References | (GENTOO) https://security.gentoo.org/glsa/202003-08 - Third Party Advisory | |
| First Time |
Fedoraproject
Redhat enterprise Linux Desktop Redhat Redhat enterprise Linux Server Redhat enterprise Linux For Scientific Computing Debian Fedoraproject fedora Debian debian Linux Redhat enterprise Linux Workstation |
Information
Published : 2019-12-10 22:15
Updated : 2023-02-04 00:08
NVD link : CVE-2019-13749
Mitre link : CVE-2019-13749
JSON object : View
Products Affected
- chrome
redhat
- enterprise_linux_workstation
- enterprise_linux_desktop
- enterprise_linux_server
- enterprise_linux_for_scientific_computing
debian
- debian_linux
apple
- iphone_os
fedoraproject
- fedora
CWE