製品・ソフトウェアに関する情報

JVN脆弱性詳細

Android 上で稼働する Google Chrome における Omnibox 内の URL を偽装される脆弱性

Title	Android 上で稼働する Google Chrome における Omnibox 内の URL を偽装される脆弱性
Summary	Android 上で稼働する Google Chrome の components/web_contents_delegate_android/web_contents_delegate_android.cc の WebContentsDelegateAndroid::OpenURLFromTab 関数は、URL の読み込みを適切に制限しないため、Omnibox 内の URL を偽装される脆弱性が存在します。
Possible impacts	第三者により、Omnibox 内の URL を偽装される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	July 16, 2014, midnight
Registration Date	July 22, 2014, 3:04 p.m.
Last Update	July 22, 2014, 3:04 p.m.

CVSS2.0 : 警告
Score	6.4
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:N

Affected System

Google

Google Chrome 36.0.1985.122 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2014-3159	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-31593
National Vulnerability Database (NVD)
2	CVE-2014-3159	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3159

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	Name	URL
Chromium
1	Revision 273865	https://src.chromium.org/viewvc/chrome?revision=273865&view=revision
Google
2	Chrome for Android Update	http://googlechromereleases.blogspot.jp/2014/07/chrome-for-android-update.html
3	Google Chrome	https://www.google.com/intl/ja/chrome/browser/features.html

Change Log

No	Changed Details	Date of change
0	[2014年07月22日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2014-3159

Summary	The WebContentsDelegateAndroid::OpenURLFromTab function in components/web_contents_delegate_android/web_contents_delegate_android.cc in Google Chrome before 36.0.1985.122 on Android does not properly restrict URL loading, which allows remote attackers to spoof the URL in the Omnibox via unspecified vectors.
Publication Date	July 20, 2014, 8:12 p.m.
Registration Date	Jan. 26, 2021, 3:10 p.m.
Last Update	Nov. 21, 2024, 11:07 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:google:chrome::::::::			36.0.1985.106
cpe:2.3:a:google:chrome:36.0.1985.1:::::::*
cpe:2.3:a:google:chrome:36.0.1985.2:::::::*
cpe:2.3:a:google:chrome:36.0.1985.3:::::::*
cpe:2.3:a:google:chrome:36.0.1985.4:::::::*
cpe:2.3:a:google:chrome:36.0.1985.5:::::::*
cpe:2.3:a:google:chrome:36.0.1985.6:::::::*
cpe:2.3:a:google:chrome:36.0.1985.8:::::::*
cpe:2.3:a:google:chrome:36.0.1985.12:::::::*
cpe:2.3:a:google:chrome:36.0.1985.13:::::::*
cpe:2.3:a:google:chrome:36.0.1985.14:::::::*
cpe:2.3:a:google:chrome:36.0.1985.15:::::::*
cpe:2.3:a:google:chrome:36.0.1985.16:::::::*
cpe:2.3:a:google:chrome:36.0.1985.17:::::::*
cpe:2.3:a:google:chrome:36.0.1985.18:::::::*
cpe:2.3:a:google:chrome:36.0.1985.19:::::::*
cpe:2.3:a:google:chrome:36.0.1985.20:::::::*
cpe:2.3:a:google:chrome:36.0.1985.21:::::::*
cpe:2.3:a:google:chrome:36.0.1985.22:::::::*
cpe:2.3:a:google:chrome:36.0.1985.23:::::::*
cpe:2.3:a:google:chrome:36.0.1985.24:::::::*
cpe:2.3:a:google:chrome:36.0.1985.25:::::::*
cpe:2.3:a:google:chrome:36.0.1985.26:::::::*
cpe:2.3:a:google:chrome:36.0.1985.27:::::::*
cpe:2.3:a:google:chrome:36.0.1985.28:::::::*
cpe:2.3:a:google:chrome:36.0.1985.29:::::::*
cpe:2.3:a:google:chrome:36.0.1985.30:::::::*
cpe:2.3:a:google:chrome:36.0.1985.31:::::::*
cpe:2.3:a:google:chrome:36.0.1985.32:::::::*
cpe:2.3:a:google:chrome:36.0.1985.33:::::::*
cpe:2.3:a:google:chrome:36.0.1985.34:::::::*
cpe:2.3:a:google:chrome:36.0.1985.35:::::::*
cpe:2.3:a:google:chrome:36.0.1985.36:::::::*
cpe:2.3:a:google:chrome:36.0.1985.37:::::::*
cpe:2.3:a:google:chrome:36.0.1985.38:::::::*
cpe:2.3:a:google:chrome:36.0.1985.39:::::::*
cpe:2.3:a:google:chrome:36.0.1985.40:::::::*
cpe:2.3:a:google:chrome:36.0.1985.41:::::::*
cpe:2.3:a:google:chrome:36.0.1985.42:::::::*
cpe:2.3:a:google:chrome:36.0.1985.43:::::::*
cpe:2.3:a:google:chrome:36.0.1985.44:::::::*
cpe:2.3:a:google:chrome:36.0.1985.45:::::::*
cpe:2.3:a:google:chrome:36.0.1985.46:::::::*
cpe:2.3:a:google:chrome:36.0.1985.47:::::::*
cpe:2.3:a:google:chrome:36.0.1985.48:::::::*
cpe:2.3:a:google:chrome:36.0.1985.49:::::::*
cpe:2.3:a:google:chrome:36.0.1985.50:::::::*
cpe:2.3:a:google:chrome:36.0.1985.51:::::::*
cpe:2.3:a:google:chrome:36.0.1985.52:::::::*
cpe:2.3:a:google:chrome:36.0.1985.53:::::::*
cpe:2.3:a:google:chrome:36.0.1985.54:::::::*
cpe:2.3:a:google:chrome:36.0.1985.55:::::::*
cpe:2.3:a:google:chrome:36.0.1985.56:::::::*
cpe:2.3:a:google:chrome:36.0.1985.57:::::::*
cpe:2.3:a:google:chrome:36.0.1985.58:::::::*
cpe:2.3:a:google:chrome:36.0.1985.59:::::::*
cpe:2.3:a:google:chrome:36.0.1985.60:::::::*
cpe:2.3:a:google:chrome:36.0.1985.61:::::::*
cpe:2.3:a:google:chrome:36.0.1985.62:::::::*
cpe:2.3:a:google:chrome:36.0.1985.63:::::::*
cpe:2.3:a:google:chrome:36.0.1985.64:::::::*
cpe:2.3:a:google:chrome:36.0.1985.65:::::::*
cpe:2.3:a:google:chrome:36.0.1985.66:::::::*
cpe:2.3:a:google:chrome:36.0.1985.67:::::::*
cpe:2.3:a:google:chrome:36.0.1985.68:::::::*
cpe:2.3:a:google:chrome:36.0.1985.69:::::::*
cpe:2.3:a:google:chrome:36.0.1985.70:::::::*
cpe:2.3:a:google:chrome:36.0.1985.72:::::::*
cpe:2.3:a:google:chrome:36.0.1985.73:::::::*
cpe:2.3:a:google:chrome:36.0.1985.74:::::::*
cpe:2.3:a:google:chrome:36.0.1985.75:::::::*
cpe:2.3:a:google:chrome:36.0.1985.76:::::::*
cpe:2.3:a:google:chrome:36.0.1985.77:::::::*
cpe:2.3:a:google:chrome:36.0.1985.78:::::::*
cpe:2.3:a:google:chrome:36.0.1985.79:::::::*
cpe:2.3:a:google:chrome:36.0.1985.81:::::::*
cpe:2.3:a:google:chrome:36.0.1985.82:::::::*
cpe:2.3:a:google:chrome:36.0.1985.83:::::::*
cpe:2.3:a:google:chrome:36.0.1985.84:::::::*
cpe:2.3:a:google:chrome:36.0.1985.85:::::::*
cpe:2.3:a:google:chrome:36.0.1985.86:::::::*
cpe:2.3:a:google:chrome:36.0.1985.87:::::::*
cpe:2.3:a:google:chrome:36.0.1985.88:::::::*
cpe:2.3:a:google:chrome:36.0.1985.89:::::::*
cpe:2.3:a:google:chrome:36.0.1985.90:::::::*
cpe:2.3:a:google:chrome:36.0.1985.91:::::::*
cpe:2.3:a:google:chrome:36.0.1985.92:::::::*
cpe:2.3:a:google:chrome:36.0.1985.93:::::::*
cpe:2.3:a:google:chrome:36.0.1985.94:::::::*
cpe:2.3:a:google:chrome:36.0.1985.95:::::::*
cpe:2.3:a:google:chrome:36.0.1985.96:::::::*
cpe:2.3:a:google:chrome:36.0.1985.97:::::::*
cpe:2.3:a:google:chrome:36.0.1985.98:::::::*
cpe:2.3:a:google:chrome:36.0.1985.99:::::::*
cpe:2.3:a:google:chrome:36.0.1985.100:::::::*
cpe:2.3:a:google:chrome:36.0.1985.101:::::::*
cpe:2.3:a:google:chrome:36.0.1985.102:::::::*
cpe:2.3:a:google:chrome:36.0.1985.103:::::::*
cpe:2.3:a:google:chrome:36.0.1985.104:::::::*
cpe:2.3:a:google:chrome:36.0.1985.105:::::::*
execution environment
1	cpe:2.3:o:google:android::::::::

Related information, measures and tools

No	URL	refsource	タグ
1	http://googlechromereleases.blogspot.com/2014/07/chrome-for-android-update.html
2	http://googlechromereleases.blogspot.com/2014/07/chrome-for-android-update.html
3	https://code.google.com/p/chromium/issues/detail?id=352083
4	https://code.google.com/p/chromium/issues/detail?id=352083
5	https://src.chromium.org/viewvc/chrome?revision=273865&view=revision
6	https://src.chromium.org/viewvc/chrome?revision=273865&view=revision

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-20	不適切な入力確認	https://cwe.mitre.org/data/definitions/20.html

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:google:chrome::::::::			36.0.1985.106
cpe:2.3:a:google:chrome:36.0.1985.1:::::::*
cpe:2.3:a:google:chrome:36.0.1985.2:::::::*
cpe:2.3:a:google:chrome:36.0.1985.3:::::::*
cpe:2.3:a:google:chrome:36.0.1985.4:::::::*
cpe:2.3:a:google:chrome:36.0.1985.5:::::::*
cpe:2.3:a:google:chrome:36.0.1985.6:::::::*
cpe:2.3:a:google:chrome:36.0.1985.8:::::::*
cpe:2.3:a:google:chrome:36.0.1985.12:::::::*
cpe:2.3:a:google:chrome:36.0.1985.13:::::::*
cpe:2.3:a:google:chrome:36.0.1985.14:::::::*
cpe:2.3:a:google:chrome:36.0.1985.15:::::::*
cpe:2.3:a:google:chrome:36.0.1985.16:::::::*
cpe:2.3:a:google:chrome:36.0.1985.17:::::::*
cpe:2.3:a:google:chrome:36.0.1985.18:::::::*
cpe:2.3:a:google:chrome:36.0.1985.19:::::::*
cpe:2.3:a:google:chrome:36.0.1985.20:::::::*
cpe:2.3:a:google:chrome:36.0.1985.21:::::::*
cpe:2.3:a:google:chrome:36.0.1985.22:::::::*
cpe:2.3:a:google:chrome:36.0.1985.23:::::::*
cpe:2.3:a:google:chrome:36.0.1985.24:::::::*
cpe:2.3:a:google:chrome:36.0.1985.25:::::::*
cpe:2.3:a:google:chrome:36.0.1985.26:::::::*
cpe:2.3:a:google:chrome:36.0.1985.27:::::::*
cpe:2.3:a:google:chrome:36.0.1985.28:::::::*
cpe:2.3:a:google:chrome:36.0.1985.29:::::::*
cpe:2.3:a:google:chrome:36.0.1985.30:::::::*
cpe:2.3:a:google:chrome:36.0.1985.31:::::::*
cpe:2.3:a:google:chrome:36.0.1985.32:::::::*
cpe:2.3:a:google:chrome:36.0.1985.33:::::::*
cpe:2.3:a:google:chrome:36.0.1985.34:::::::*
cpe:2.3:a:google:chrome:36.0.1985.35:::::::*
cpe:2.3:a:google:chrome:36.0.1985.36:::::::*
cpe:2.3:a:google:chrome:36.0.1985.37:::::::*
cpe:2.3:a:google:chrome:36.0.1985.38:::::::*
cpe:2.3:a:google:chrome:36.0.1985.39:::::::*
cpe:2.3:a:google:chrome:36.0.1985.40:::::::*
cpe:2.3:a:google:chrome:36.0.1985.41:::::::*
cpe:2.3:a:google:chrome:36.0.1985.42:::::::*
cpe:2.3:a:google:chrome:36.0.1985.43:::::::*
cpe:2.3:a:google:chrome:36.0.1985.44:::::::*
cpe:2.3:a:google:chrome:36.0.1985.45:::::::*
cpe:2.3:a:google:chrome:36.0.1985.46:::::::*
cpe:2.3:a:google:chrome:36.0.1985.47:::::::*
cpe:2.3:a:google:chrome:36.0.1985.48:::::::*
cpe:2.3:a:google:chrome:36.0.1985.49:::::::*
cpe:2.3:a:google:chrome:36.0.1985.50:::::::*
cpe:2.3:a:google:chrome:36.0.1985.51:::::::*
cpe:2.3:a:google:chrome:36.0.1985.52:::::::*
cpe:2.3:a:google:chrome:36.0.1985.53:::::::*
cpe:2.3:a:google:chrome:36.0.1985.54:::::::*
cpe:2.3:a:google:chrome:36.0.1985.55:::::::*
cpe:2.3:a:google:chrome:36.0.1985.56:::::::*
cpe:2.3:a:google:chrome:36.0.1985.57:::::::*
cpe:2.3:a:google:chrome:36.0.1985.58:::::::*
cpe:2.3:a:google:chrome:36.0.1985.59:::::::*
cpe:2.3:a:google:chrome:36.0.1985.60:::::::*
cpe:2.3:a:google:chrome:36.0.1985.61:::::::*
cpe:2.3:a:google:chrome:36.0.1985.62:::::::*
cpe:2.3:a:google:chrome:36.0.1985.63:::::::*
cpe:2.3:a:google:chrome:36.0.1985.64:::::::*
cpe:2.3:a:google:chrome:36.0.1985.65:::::::*
cpe:2.3:a:google:chrome:36.0.1985.66:::::::*
cpe:2.3:a:google:chrome:36.0.1985.67:::::::*
cpe:2.3:a:google:chrome:36.0.1985.68:::::::*
cpe:2.3:a:google:chrome:36.0.1985.69:::::::*
cpe:2.3:a:google:chrome:36.0.1985.70:::::::*
cpe:2.3:a:google:chrome:36.0.1985.72:::::::*
cpe:2.3:a:google:chrome:36.0.1985.73:::::::*
cpe:2.3:a:google:chrome:36.0.1985.74:::::::*
cpe:2.3:a:google:chrome:36.0.1985.75:::::::*
cpe:2.3:a:google:chrome:36.0.1985.76:::::::*
cpe:2.3:a:google:chrome:36.0.1985.77:::::::*
cpe:2.3:a:google:chrome:36.0.1985.78:::::::*
cpe:2.3:a:google:chrome:36.0.1985.79:::::::*
cpe:2.3:a:google:chrome:36.0.1985.81:::::::*
cpe:2.3:a:google:chrome:36.0.1985.82:::::::*
cpe:2.3:a:google:chrome:36.0.1985.83:::::::*
cpe:2.3:a:google:chrome:36.0.1985.84:::::::*
cpe:2.3:a:google:chrome:36.0.1985.85:::::::*
cpe:2.3:a:google:chrome:36.0.1985.86:::::::*
cpe:2.3:a:google:chrome:36.0.1985.87:::::::*
cpe:2.3:a:google:chrome:36.0.1985.88:::::::*
cpe:2.3:a:google:chrome:36.0.1985.89:::::::*
cpe:2.3:a:google:chrome:36.0.1985.90:::::::*
cpe:2.3:a:google:chrome:36.0.1985.91:::::::*
cpe:2.3:a:google:chrome:36.0.1985.92:::::::*
cpe:2.3:a:google:chrome:36.0.1985.93:::::::*
cpe:2.3:a:google:chrome:36.0.1985.94:::::::*
cpe:2.3:a:google:chrome:36.0.1985.95:::::::*
cpe:2.3:a:google:chrome:36.0.1985.96:::::::*
cpe:2.3:a:google:chrome:36.0.1985.97:::::::*
cpe:2.3:a:google:chrome:36.0.1985.98:::::::*
cpe:2.3:a:google:chrome:36.0.1985.99:::::::*
cpe:2.3:a:google:chrome:36.0.1985.100:::::::*
cpe:2.3:a:google:chrome:36.0.1985.101:::::::*
cpe:2.3:a:google:chrome:36.0.1985.102:::::::*
cpe:2.3:a:google:chrome:36.0.1985.103:::::::*
cpe:2.3:a:google:chrome:36.0.1985.104:::::::*
cpe:2.3:a:google:chrome:36.0.1985.105:::::::*
execution environment
1	cpe:2.3:o:google:android::::::::