Issue metadata
Sign in to add a comment
|
Security: Google chrome browser vulnerabilities, two versions of the browser hijacking vulnerabilities, please check, thanks
Reported by
swm9...@gmail.com,
Jun 23 2016
|
||||||||||||||||||
Issue description
VULNERABILITY DETAILS
Google chrome browser is hijacked, causing hackers use browser vulnerabilities to attack, hardware firewall can not identify attacks version, I use nginx filter $ http_user_agent, identification chrome version of the shield, check the two versions of browsers exist bug loopholes, thanks, fix the vulnerability as soon as possible.
if ($http_user_agent ~* "Chrome/45.0.2454.99"){
return 503;
}
if ($http_user_agent ~* "Chrome/39.0.2171.99"){
return 503;
}
VERSION
Chrome Version: [39.0.2171.99] + [stable, beta, or dev]
Operating System: [Windows NT 6.3; Win64; x64]
Chrome Version: [45.0.2454.99] + [stable, beta, or dev]
Operating System: [Windows NT 6.3; Win64; x64]
REPRODUCTION CASE
Google chrome browser is hijacked, causing hackers use browser vulnerabilities to attack, hardware firewall can not identify attacks version, I use nginx filter $ http_user_agent, identification chrome version of the shield, check the two versions of browsers exist bug loopholes, thanks, fix the vulnerability as soon as possible.
if ($http_user_agent ~* "Chrome/45.0.2454.99"){
return 503;
}
if ($http_user_agent ~* "Chrome/39.0.2171.99"){
return 503;
}
FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
Type of crash: [Google chrome browser]
Crash State: Website malicious attacks, firewall unavailable
Client ID (if relevant): swm9988@gmail.com
,
Jun 24 2016
,
Jun 26 2016
Closing as WontFix - if you can provide further details regarding a vulnerability in an up to date version of Chrome, please post and reopen this bug.
,
Oct 2 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 2 2016
|
|||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||
Comment 1 by dominickn@chromium.org
, Jun 23 2016