CVE-2014-7899 in Google Chrome
Summary
Google Chrome before 38.0.2125.101 allows remote attackers to spoof the address bar by placing a blob: substring at the beginning of the URL, followed by the original URI scheme and a long username string.
Reservation
10/06/2014
Disclosure
11/19/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68235 | Google Chrome Address Bar input validation | 20 | Unproven | Official fix | CVE-2014-7899 |