Insufficient Policy Enforcement in Google Chrome Affects Multiple Platforms

CVE-2017-5060

Summary

A vulnerability in the Omnibox component of Google Chrome allows remote attackers to exploit insufficient policy enforcement. The flaw enables domain spoofing by leveraging IDN homographs, where deceptive domain names can impersonate legitimate ones. As a consequence, users may inadvertently visit malicious sites that visually resemble trustworthy domains. This issue affects multiple platforms, including Mac, Windows, Linux, and Android, particularly in versions prior to 58.0.3029.81 for desktop and 58.0.3029.83 for mobile devices. It underscores the importance of implementing strict domain name validations to enhance user security.

References