Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2021-38000 →
DEBIAN-CVE-2021-38000
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily brows...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
chromium
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"97.0.4692.71-0.1"}]}]
Debian:13
chromium
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"97.0.4692.71-0.1"}]}]
Debian:14
chromium
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"97.0.4692.71-0.1"}]}]
Références
- advisory security-tracker.debian.org