CVE-2020-6567: Insufficient validation of untrusted input in command line handling
Published Mar 1, 2019
·Updated
Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
Credit
Joshua Graham(TSS)
Affected Software
10 affected componentsFixes available
debian/chromium
90.0.4430.212-1~deb10u1116.0.5845.180-1~deb11u1120.0.6099.129-1~deb11u1119.0.6045.199-1~deb12u1120.0.6099.129-1~deb12u1120.0.6099.129-1
Google Chrome<85.0.4183.83
85.0.4183.83
Google Chrome<85.0.4183.83
Microsoft Windows
openSUSE Backports SLE=15.0-sp1
openSUSE Backports SLE=15.0-sp2
Debian Debian Linux=10.0
Fedoraproject Fedora=33
openSUSE Leap=15.1
openSUSE Leap=15.2
Remediation
Event History
Mar 1, 2019
CVE Published
12:00 AM
Sep 21, 2020
CVE Published
via MITRE·07:06 PM
Data Sourced
via MITRE·07:06 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-6567.
2
What is the title of this vulnerability?
The title of this vulnerability is 'Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83'.
3
What is the severity of CVE-2020-6567?
The severity of CVE-2020-6567 is medium (6.5).
4
How does CVE-2020-6567 impact Google Chrome on Windows?
CVE-2020-6567 allows a remote attacker to bypass navigation restrictions in Google Chrome on Windows prior to 85.0.4183.83.
5
How can I fix CVE-2020-6567?
To fix CVE-2020-6567, update Google Chrome on Windows to version 85.0.4183.83 or later.