PT-2009-3033 · Google · Google Chrome

X0X · Publicado 2009-01-30 · Atualizado 2024-08-07 · CVE-2009-0374

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome version 1.0.154.43

Description The issue allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Clickjacking" vulnerability. A third party disputes the relevance of this issue, stating that every sufficiently featured browser is and likely will remain susceptible to the behavior known as clickjacking, and adding that the exploit code is not a valid demonstration of the issue.

Recommendations For Google Chrome version 1.0.154.43, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2009-0374

Produtos afetados

Google Chrome

Referências · 6

• 🔥 https://exploit-db.com/exploits/7903 · Exploit
• http://securityfocus.com/archive/1/500533/100/0/threaded · Nota
• http://secniche.org/gcr_clkj · Nota
• http://securityfocus.com/archive/1/500499/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0374 · Nota de Segurança
• https://t.me/cvenotify/89575 · Publicação no Telegram