CVE-2018-6173
published 2019-01-09CVE-2018-6173: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via…
PriorityP429medium6.5CVSS 3.0
AVNACLPRNUIRSUCNIHAN
EPSS
1.40%
69.8th percentile
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| chrome | < 68.0.3440.75 | 68.0.3440.75 | |
| chrome | >= unspecified < 68.0.3440.75 | 68.0.3440.75 | |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_workstation | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv6.5MEDIUM
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4vg9-ppq4-4286: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68
ghsa_unreviewed·2022-05-13
CVE-2018-6173 [MEDIUM] GHSA-4vg9-ppq4-4286: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
OSV
CVE-2018-6173: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68
osv·2019-01-09·CVSS 6.5
CVE-2018-6173 [MEDIUM] CVE-2018-6173: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
Red Hat
chromium-browser: URL spoof in Omnibox
vendor_redhat·2018-07-24·CVSS 6.5
CVE-2018-6173 [MEDIUM] chromium-browser: URL spoof in Omnibox
chromium-browser: URL spoof in Omnibox
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2018-6173 chromium-browser: URL spoof in Omnibox
bugzilla·2018-07-25·CVSS 6.5
CVE-2018-6173 [MEDIUM] CVE-2018-6173 chromium-browser: URL spoof in Omnibox
CVE-2018-6173 chromium-browser: URL spoof in Omnibox
An url spoof flaw was found in the Omnibox component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=836885
External References:
https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html
Discussion:
Created chromium tracking bugs for this issue:
Affects: epel-7 [bug 1608211]
Affects: fedora-all [bug 1608210]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2018:2282 https://access.redhat.com/errata/RHSA-2018:2282
Bugzilla
CVE-2018-10120 libreoffice: Out of bounds write in filter/ww8/ww8toolbar.cxx:SwCTBWrapper class allows for denial of service with crafted document
bugzilla·2018-04-20·CVSS 7.8
CVE-2018-10120 [HIGH] CVE-2018-10120 libreoffice: Out of bounds write in filter/ww8/ww8toolbar.cxx:SwCTBWrapper class allows for denial of service with crafted document
CVE-2018-10120 libreoffice: Out of bounds write in filter/ww8/ww8toolbar.cxx:SwCTBWrapper class allows for denial of service with crafted document
LibreOffice before versions 5.4.6.1 and 6.0.2.1 has a missing bounds check in sw/source/filter/ww8/ww8toolbar.cxx:SwCTBWrapper::Read() allowing for an out of bounds write. An attacker could exploit this to cause a denial of service via crafted document.
External Reference:
https://www.libreoffice.org/about-us/security/advisories/cve-2018-10120/
Additional Reference:
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6173
Upstream Patches:
https://gerrit.libreoffice.org/gitweb?p=core.git;a=commit;h=017fcc2fcd00af17a97bd5463d89662404f57667
https://gerrit.libreoffice.org/#/c/49486/
https://gerrit.libreoffice.org/#/c/49499/
https://gerr
Bugzilla
CVE-2018-1000071 roundcubemail: Permissions issue in enigma plugin allows exfiltration secret gpg key file
bugzilla·2018-02-26·CVSS 7.5
CVE-2018-1000071 [HIGH] CVE-2018-1000071 roundcubemail: Permissions issue in enigma plugin allows exfiltration secret gpg key file
CVE-2018-1000071 roundcubemail: Permissions issue in enigma plugin allows exfiltration secret gpg key file
Enigma plugin in roundcube installation running on nginx web server is vulnerable to insecure permissions due to which a remote attacker is able to exfiltrate user's password protected secret GPG key file using a specially crafted URL.
Affected versions: before 1.3.4
References:
https://github.com/roundcube/roundcubemail/issues/6173
https://www.legacysecuritygroup.com/cve/references/02122018-roundcube-enigma.txt
Discussion:
Created roundcubemail tracking bugs for this issue:
Affects: epel-all [bug 1549056]
Affects: fedora-all [bug 1549055]
---
1/ Fedora package don't use .htacess, but protect the directory for both httpd and nginx
2/ The enigma plugin use /var/lib/roundcubem
http://www.securityfocus.com/bid/104887https://access.redhat.com/errata/RHSA-2018:2282https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.htmlhttps://crbug.com/836885https://security.gentoo.org/glsa/201808-01https://www.debian.org/security/2018/dsa-4256http://www.securityfocus.com/bid/104887https://access.redhat.com/errata/RHSA-2018:2282https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.htmlhttps://crbug.com/836885https://security.gentoo.org/glsa/201808-01https://www.debian.org/security/2018/dsa-4256
2019-01-09
Published