CVE-2019-5801: Input Validation
Published Jan 13, 2019
·Updated
Incorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
Credit
Khalil Zhani
Affected Software
7 affected componentsFixes available
Google Chrome<73.0.3683.75
73.0.3683.75
Google Chrome<73.0.3683.75
Apple iPhone OS
openSUSE Backports=sle-15
openSUSE Leap=15.0
openSUSE Leap=15.1
openSUSE Leap=42.3
Event History
Jan 13, 2019
CVE Published
12:00 AM
May 23, 2019
CVE Published
via MITRE·07:19 PM
Data Sourced
via MITRE·07:19 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2019-5801?
CVE-2019-5801 has been rated as high severity due to its potential for remote domain spoofing attacks.
2
How do I fix CVE-2019-5801?
To fix CVE-2019-5801, upgrade Google Chrome to version 73.0.3683.75 or later.
3
What versions of Google Chrome are affected by CVE-2019-5801?
CVE-2019-5801 affects versions of Google Chrome prior to 73.0.3683.75.
4
Can CVE-2019-5801 affect my iPhone if I use Google Chrome?
Yes, CVE-2019-5801 can affect the Google Chrome browser on iOS devices prior to version 73.0.3683.75.
5
What type of attack is associated with CVE-2019-5801?
CVE-2019-5801 is associated with remote domain spoofing attacks enabled by incorrectly eliding URLs in the Omnibox.