Google Chrome for iOS Prior to 21.0.1180.82 Address Bar Spoofing Vulnerability

Bugtraq ID:	64745
Class:	Design Error
CVE:	CVE-2012-2898
Remote:	Yes
Local:	No
Published:	Sep 24 2012 12:00AM
Updated:	Sep 24 2012 12:00AM
Credit:	Lukasz Pilorz.
Vulnerable:	Google Chrome for iOS 21.0.1180.80
Not Vulnerable:	Google Chrome for iOS 21.0.1180.82

Google Chrome for iOS Prior to 21.0.1180.82 Address Bar Spoofing Vulnerability

Google Chrome for iOS is prone to an address bar spoofing vulnerability.

An attacker may exploit this vulnerability to spoof the originating URL of a trusted web site. This issue may allow a remote attacker to carry out phishing-style attacks.

Versions prior to Chrome 21.0.1180.82 are vulnerable.

Google Chrome for iOS Prior to 21.0.1180.82 Address Bar Spoofing Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Chrome for iOS Prior to 21.0.1180.82 Address Bar Spoofing Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Chrome for iOS Prior to 21.0.1180.82 Address Bar Spoofing Vulnerability

References:

• Chrome for iOS Update 21.0.1180.82 (Google)
  
• Google Chrome for iOS Product Page (Google)