The WebContentsDelegateAndroid::OpenURLFromTab function in components/web_contents_delegate_android/web_contents_delegate_android.cc in Google Chrome before 36.0.1985.122 on Android does not properly restrict URL loading, which allows remote attackers to spoof the URL in the Omnibox via unspecified vectors.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 6.4 | MEDIUM | AV:N/AC:L/Au:N/C:P/I:P/A:N |
| Hyperlink | Source | Resource |
|---|---|---|
| http://googlechromereleases.blogspot.com/2014/07/chrome-for-android-update.html | chrome-cve-admin@google.com | N/A |
| https://code.google.com/p/chromium/issues/detail?id=352083 | chrome-cve-admin@google.com | N/A |
| https://src.chromium.org/viewvc/chrome?revision=273865&view=revision | chrome-cve-admin@google.com | N/A |
| http://googlechromereleases.blogspot.com/2014/07/chrome-for-android-update.html | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| https://code.google.com/p/chromium/issues/detail?id=352083 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| https://src.chromium.org/viewvc/chrome?revision=273865&view=revision | af854a3a-2127-422b-91ae-364da2661108 | N/A |