CVE-2014-3159

Published Jul 20, 2014 CVSS 2.0 · 6.4 Medium EPSS < 1% KEV · Not listed
Description
The WebContentsDelegateAndroid::OpenURLFromTab function in components/web_contents_delegate_android/web_contents_delegate_android.cc in Google Chrome before 36.0.1985.122 on Android does not properly restrict URL loading, which allows remote attackers to spoof the URL in the Omnibox via unspecified vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2014-3177 The WebContentsDelegateAndroid::OpenURLFromTab function in components/web_contents_delegate_android/web_contents_delegate_android.cc in Google Chrome before 36.0.1985.122 on Android does not properly restrict URL loading, which allows remote attackers to spoof the URL in the Omnibox via unspecified vectors.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
Chrome
Published
Updated
Aug 6, 2024, 10:35 AM
Reserved
May 3, 2014, 12:00 AM
Status
Modified
Published
Jul 20, 2014, 11:12 AM
Modified
Jun 17, 2026, 12:07 AM