CVE-2014-1723 - The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers (IRIs), which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left (RTL) Unicode text

Back Back to CVE browser

HIGH

The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers (IRIs), which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left (RTL) Unicode text

Published Apr 9, 2014

7.5

HIGH

CVSS 2.0

EPSS 1.37%

Description

The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers (IRIs), which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left (RTL) Unicode text.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (6)

http://googlechromereleases.blogspot.com/2014/04/stable-channel-update.html
x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2014-05/msg00012.html
vendor-advisoryx_refsource_SUSE
http://security.gentoo.org/glsa/glsa-201408-16.xml
vendor-advisoryx_refsource_GENTOO
http://www.debian.org/security/2014/dsa-2905
vendor-advisoryx_refsource_DEBIAN
https://code.google.com/p/chromium/issues/detail?id=337746
x_refsource_CONFIRM
https://src.chromium.org/viewvc/chrome?revision=254091&view=revision
x_refsource_CONFIRM

Link	Providers	Tags
http://googlechromereleases.blogspot.com/2014/04/stable-channel-update.html		x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2014-05/msg00012.html		vendor-advisoryx_refsource_SUSE
http://security.gentoo.org/glsa/glsa-201408-16.xml		vendor-advisoryx_refsource_GENTOO
http://www.debian.org/security/2014/dsa-2905		vendor-advisoryx_refsource_DEBIAN
https://code.google.com/p/chromium/issues/detail?id=337746		x_refsource_CONFIRM
https://src.chromium.org/viewvc/chrome?revision=254091&view=revision		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Chrome

Published Apr 9, 2014

Updated Aug 6, 2024

Reserved Jan 29, 2014

Link CVE-2014-1723

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2014-1723

Red Hat

Severity n/a

Public date n/a

Links CVE-2014-1723