First published: Sun Feb 17 2019(Updated: )
Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a local attacker to perform domain spoofing via a crafted domain name.
Credit: Joshua Graham TSS cve-coordination@google.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Chrome | <73.0.3683.75 | 73.0.3683.75 |
Google Chrome | <73.0.3683.75 | |
Microsoft Windows | ||
SUSE Backports | =sle-15 | |
openSUSE | =15.0 | |
openSUSE | =15.1 | |
openSUSE | =42.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2019-5804 has a severity rating of medium due to its potential for domain spoofing.
To fix CVE-2019-5804, update Google Chrome to version 73.0.3683.75 or later.
Users of Google Chrome prior to version 73.0.3683.75 are affected by CVE-2019-5804.
CVE-2019-5804 is a local attacker vulnerability that allows for domain spoofing through improper command line processing.
All versions of Google Chrome before 73.0.3683.75 are impacted by CVE-2019-5804.