Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
References
| Link | Resource |
|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html | Broken Link |
| http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html | Mailing List Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2019:4238 | Third Party Advisory |
| https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html | Vendor Advisory |
| https://crbug.com/884693 | Permissions Required |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2Z5M4FPUMDNX2LDPHJKN5ZV5GIS2AKNU/ | |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/ | |
| https://seclists.org/bugtraq/2020/Jan/27 | Mailing List Third Party Advisory |
| https://security.gentoo.org/glsa/202003-08 | Third Party Advisory |
| https://www.debian.org/security/2020/dsa-4606 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
07 Nov 2023, 03:04
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
10 Feb 2023, 18:57
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Fedoraproject
Redhat enterprise Linux Desktop Redhat Redhat enterprise Linux Server Redhat enterprise Linux For Scientific Computing Debian Fedoraproject fedora Debian debian Linux Redhat enterprise Linux Workstation |
|
| CPE | cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:x64:* cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:x86:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:x64:* cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:x86:* cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:x86:* cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:x64:* cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:x64:* cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:x86:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
|
| References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2Z5M4FPUMDNX2LDPHJKN5ZV5GIS2AKNU/ - Mailing List, Third Party Advisory | |
| References | (BUGTRAQ) https://seclists.org/bugtraq/2020/Jan/27 - Mailing List, Third Party Advisory | |
| References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/ - Mailing List, Third Party Advisory | |
| References | (REDHAT) https://access.redhat.com/errata/RHSA-2019:4238 - Third Party Advisory | |
| References | (DEBIAN) https://www.debian.org/security/2020/dsa-4606 - Third Party Advisory | |
| References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html - Broken Link | |
| References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html - Mailing List, Third Party Advisory | |
| References | (GENTOO) https://security.gentoo.org/glsa/202003-08 - Third Party Advisory |
Information
Published : 2019-12-10 22:15
Updated : 2023-12-10 13:13
NVD link : CVE-2019-13757
Mitre link : CVE-2019-13757
CVE.ORG link : CVE-2019-13757
JSON object : View
Products Affected
redhat
- enterprise_linux_server
- enterprise_linux_desktop
- enterprise_linux_workstation
- enterprise_linux_for_scientific_computing
debian
- debian_linux
fedoraproject
- fedora
- chrome
CWE