This security issue exists in both Chrome and Firefox
http://www.rafayhackingarticles.net/2016/08/google-chrome-firefox-address-bar.html
http://www.spamfighter.com/News-20440-Ordinary-URL-Spoofing-Flaw-Affects-Firefox-and-Chrome.htm
CVE number is indeed related to Firefox issue only.
But security problem exists on Chrome in Ubuntu 12.04 (I reproduced it).
Perhaps link to CVE should be considered invalid, but why whole bug is
closed?
** Changed in: chromium-browser (Ubuntu)
Status: Invalid => New
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to chromium-browser in Ubuntu.
https://bugs.launchpad.net/bugs/1619911
Title:
Security - CVE-2016-5267 - not fixed
Status in chromium-browser package in Ubuntu:
New
Bug description:
chromium-broswer
# apt-cache policy chromium-browser
chromium-browser:
Installed: 37.0.2062.120-0ubuntu0.12.04.3
Candidate: 37.0.2062.120-0ubuntu0.12.04.3
Version table:
*** 37.0.2062.120-0ubuntu0.12.04.3 0
500 http://ru.archive.ubuntu.com/ubuntu/ precise-updates/universe
amd64 Packages
500 http://security.ubuntu.com/ubuntu/ precise-security/universe
amd64 Packages
100 /var/lib/dpkg/status
18.0.1025.151~r130497-0ubuntu1 0
500 http://ru.archive.ubuntu.com/ubuntu/ precise/universe amd64
Packages
affected by http://www.rafayhackingarticles.net/2016/08/google-chrome-
firefox-address-bar.html
i.e. if I go to URL http://127.0.0.1/%EF%B9%B0/http://google.com/test
I see "google.com" domain in address bar
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1619911/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
