CVE-2017-5060 PUBLISHED

Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.

EPSS 0.65% · 70.6th percentile

Risk Scores

EPSS Score
0.65%
70.6th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSoxide-qt1.21.5-0ubuntu0.16.04.1, 1.20.4-0ubuntu0.16.04.1, 1.19.4-0ubuntu0.16.04.1
Ubuntu:14.04:LTSchromium-browser49.0.2623.87-0ubuntu0.14.04.1.1112, 49.0.2623.108-0ubuntu0.14.04.1.1113, 50.0.2661.102-0ubuntu0.14.04.1.1117
Ubuntu:16.04:LTSchromium-browser57.0.2987.98-0ubuntu0.16.04.1276, 56.0.2924.76-0ubuntu0.16.04.1268, 55.0.2883.87-0ubuntu0.16.04.1263

Timeline

References

Open in Interactive Console →