Summaryinfo

A vulnerability has been found in Google Chrome 30.0.1599.16 on iOS7 and classified as problematic. This affects an unknown part of the component Private Browsing. This manipulation causes information disclosure (Search History). In addition, an exploit is available.

Detailsinfo

A vulnerability was found in Google Chrome 30.0.1599.16 on iOS7 (Web Browser). It has been declared as problematic. Affected by this vulnerability is an unknown part of the component Private Browsing. The manipulation with an unknown input leads to a information disclosure vulnerability (Search History). The CWE definition for the vulnerability is CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. As an impact it is known to affect confidentiality.

The weakness was presented 10/03/2013 by Tom Faller with Parallax as Chrome For iOS Bug Shows Private Browsing Search History In Google Mobile Search Bar as confirmed news (Website). The advisory is shared at parall.ax. The public release happened without involvement of Google. An attack has to be approached locally. A single authentication is necessary for exploitation. Technical details are unknown but a public exploit is available. MITRE ATT&CK project uses the attack technique T1592 for this issue. The advisory points out:

It appears that incognito mode in the iOS 7 version of Google Chrome is broken. Searches completed in incognito windows in the updated Google Chrome app are shared with the regular browser.

A public exploit has been developed by Tom Faller and been published immediately after the advisory. It is possible to download the exploit at youtube.com. It is declared as proof-of-concept. We expect the 0-day to have been worth approximately $25k-$100k. TechCrunch provides the following remark: "Note that if you try to search from the combined address/URL bar in non-Incognito mode, you won’t see your search history from when you were browsing in private – you need to navigate to Google.com (or Google.co.uk, etc.) in order to see the history of terms you looked up while supposedly keeping your data and history off the books."

Upgrading eliminates this vulnerability. The upgrade is hosted for download at chrome.google.com.

Additional details are provided at techcrunch.com. See VDB-10572, VDB-10571, VDB-10570 and VDB-10569 for similar entries. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Web Browser

Vendor

• Google

Name

• Chrome

Version

• 30.0.1599.16

License

• free

Website

• Vendor: https://www.google.com/
• Product: https://www.google.com/chrome/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

Video

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion