CVEvulnerability

CVE-2014-3159

6.4 MEDIUM Published 2014-07-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-07-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-20

Description

The WebContentsDelegateAndroid::OpenURLFromTab function in components/web_contents_delegate_android/web_contents_delegate_android.cc in Google Chrome before 36.0.1985.122 on Android does not properly restrict URL loading, which allows remote attackers to spoof the URL in the Omnibox via unspecified vectors.

Affected configurations

• google chrome (<= 36.0.1985.106) • google chrome 36.0.1985.1 • google chrome 36.0.1985.2 • google chrome 36.0.1985.3 • google chrome 36.0.1985.4 • google chrome 36.0.1985.5 • google chrome 36.0.1985.6 • google chrome 36.0.1985.8 • google chrome 36.0.1985.12 • google chrome 36.0.1985.13 • google chrome 36.0.1985.14 • google chrome 36.0.1985.15 • google chrome 36.0.1985.16 • google chrome 36.0.1985.17 • google chrome 36.0.1985.18 • google chrome 36.0.1985.19 • google chrome 36.0.1985.20 • google chrome 36.0.1985.21 • google chrome 36.0.1985.22 • google chrome 36.0.1985.23 • google chrome 36.0.1985.24 • google chrome 36.0.1985.25 • google chrome 36.0.1985.26 • google chrome 36.0.1985.27 • google chrome 36.0.1985.28 • google chrome 36.0.1985.29 • google chrome 36.0.1985.30 • google chrome 36.0.1985.31 • google chrome 36.0.1985.32 • google chrome 36.0.1985.33 • google chrome 36.0.1985.34 • google chrome 36.0.1985.35 • google chrome 36.0.1985.36 • google chrome 36.0.1985.37 • google chrome 36.0.1985.38 • google chrome 36.0.1985.39 • google chrome 36.0.1985.40 • google chrome 36.0.1985.41 • google chrome 36.0.1985.42 • google chrome 36.0.1985.43 • google chrome 36.0.1985.44 • google chrome 36.0.1985.45 • google chrome 36.0.1985.46 • google chrome 36.0.1985.47 • google chrome 36.0.1985.48 • google chrome 36.0.1985.49 • google chrome 36.0.1985.50 • google chrome 36.0.1985.51 • google chrome 36.0.1985.52 • google chrome 36.0.1985.53 • google chrome 36.0.1985.54 • google chrome 36.0.1985.55 • google chrome 36.0.1985.56 • google chrome 36.0.1985.57 • google chrome 36.0.1985.58 • google chrome 36.0.1985.59 • google chrome 36.0.1985.60 • google chrome 36.0.1985.61 • google chrome 36.0.1985.62 • google chrome 36.0.1985.63 … and 40 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References