CVE-2017-5015: Medium severity Google Chrome vulnerability
Published Feb 17, 2017
·Updated
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
Affected Software
1 affected component
Google Chrome<=55.0.2883.87
Event History
Feb 17, 2017
CVE Published
via MITRE·07:45 AM
Data Sourced
via MITRE·07:45 AM
DescriptionWeakness
Data Sourced
via NVD·07:59 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-5015?
CVE-2017-5015 has a medium severity rating due to its ability to perform domain spoofing.
2
How do I fix CVE-2017-5015?
To fix CVE-2017-5015, update Google Chrome to version 56.0.2924.76 or later.
3
What systems are affected by CVE-2017-5015?
CVE-2017-5015 affects Google Chrome versions prior to 56.0.2924.76 on Linux, Windows, Mac, and prior to 56.0.2924.87 on Android.
4
What type of attack is associated with CVE-2017-5015?
CVE-2017-5015 is associated with a domain spoofing attack using IDN homographs.
5
Can CVE-2017-5015 lead to phishing attacks?
Yes, CVE-2017-5015 can potentially enable phishing attacks through deceptive domain names.