CVE-2018-16080: Input Validation

Q: Who is exposed to this issue?

Users of Google Chrome on macOS running a version earlier than 69.0.3497.81 are exposed when they visit a crafted HTML page. The listed Chromium browser packages may also require vendor-specific update verification.

Q: What does an attacker need to exploit it?

An attacker can exploit the flaw remotely by serving a crafted HTML page and requiring the user to interact with it. No attacker privileges are required.

Q: What is the practical impact of successful exploitation?

Successful exploitation lets an attacker spoof the contents of the Omnibox, or URL bar, while handling popup windows in fullscreen mode. This can misrepresent the site or URL shown to the user.

Q: How can I determine whether Chrome is affected?

On macOS, check the installed Google Chrome version. Versions prior to 69.0.3497.81 are affected according to the provided information.

Published Sep 5, 2018

Updated

A missing check for popup window handling in Fullscreen in Google Chrome on macOS prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Other sources

An url spoof flaw was found in the full screen mode component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=858929

External References:

https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html

— Red Hat

Affected Software

4 affected componentsFixes available

redhat/chromium-browser<69.0.3497.81

69.0.3497.81

Google Chrome<69.0.3497.81

Apple macOS

debian/chromium-browser

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/chromium-browser to a version that resolves this vulnerability.
Fixed in 69.0.3497.81
Upgrade
Upgrade Google Chrome to a version that resolves this vulnerability.
Fixed in 69.0.3497.81

Event History

Jan 9, 2019

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

DSA-4289

Frequently Asked Questions

Who is exposed to this issue?

Users of Google Chrome on macOS running a version earlier than 69.0.3497.81 are exposed when they visit a crafted HTML page. The listed Chromium browser packages may also require vendor-specific update verification.

What does an attacker need to exploit it?

An attacker can exploit the flaw remotely by serving a crafted HTML page and requiring the user to interact with it. No attacker privileges are required.

What is the practical impact of successful exploitation?

Successful exploitation lets an attacker spoof the contents of the Omnibox, or URL bar, while handling popup windows in fullscreen mode. This can misrepresent the site or URL shown to the user.

How can I determine whether Chrome is affected?

On macOS, check the installed Google Chrome version. Versions prior to 69.0.3497.81 are affected according to the provided information.

CVE-2018-16080: Input Validation

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the practical impact of successful exploitation?

How can I determine whether Chrome is affected?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the practical impact of successful exploitation?

How can I determine whether Chrome is affected?