Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and conduct SMB relay attacks via a crafted web page that is accessed with the "Save page as" menu choice.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Google Chrome 安全漏洞
Vulnerability Description
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。 Google Chrome中的下载实现过程存在安全漏洞，该漏洞源于程序没有正确限制保存文件:// URL 。远程攻击者可借助特制的Web页面利用该漏洞发现NetNTLM哈希值。以下版本受到影响：基于Windowst和OS X平台上的Google Chrome 53.0.2785.89，基于Linux平台上的Google Chrome 53.0.2785.92之前的版本。
CVSS Information
N/A
Vulnerability Type
N/A