Description
Blink, as used in Google Chrome before 52.0.2743.116, allows remote attackers to spoof the address bar via vectors involving a provisional URL for an initially empty document, related to FrameLoader.cpp and ScopedPageLoadDeferrer.cpp.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/92276 ↗
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.html ↗
- http://rhn.redhat.com/errata/RHSA-2016-1580.html ↗
- https://codereview.chromium.org/2171063002 ↗
- http://www.securitytracker.com/id/1036547 ↗
- https://crbug.com/629542 ↗
- https://security.gentoo.org/glsa/201610-09 ↗
- http://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00005.html ↗
- http://www.debian.org/security/2016/dsa-3645 ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KMX62M7UNRLWO4FEQ6YIMPMTKXXJV6A/ ↗