CVE-2014-7899

Vulnerability

Google Chrome versions prior to 38.0.2125.101 are vulnerable to address bar spoofing. An attacker can craft a URL that begins with blob: followed by the original URI scheme and a long username string. When a user visits such a URL, the address bar may display misleading content, hiding the true destination [1][3].

Exploitation

An attacker can exploit this by crafting a malicious URL and enticing a user to click on it, typically through a phishing link. No special authentication or network position is required; the user simply needs to navigate to the URL in an affected Chrome version.

Impact

Successful exploitation allows the attacker to spoof the address bar, potentially leading users to believe they are on a legitimate site. This can facilitate phishing attacks or other social engineering, though no code execution or direct data disclosure is achieved.

Mitigation

Users should upgrade to Google Chrome 38.0.2125.101 or later. The fix was implemented in revision 279232 [3]. Red Hat Enterprise Linux users can apply RHSA-2014:1894 for updated packages [1].