PT-2010-2106 · Google+1 · Google Chrome+1

Cesar Cerrudo · Publicado 2010-01-14 · Atualizado 2017-09-19 · CVE-2010-0315

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WebKit versions before r53607 Google Chrome versions before 4.0.249.89

Description The issue allows remote attackers to discover a redirect's target URL for a specific user's session on a web site. This is achieved by placing the site's URL in the HREF attribute of a stylesheet LINK element within an IFRAME element, and then reading the document.styleSheets[0].href property value.

Recommendations For WebKit versions before r53607, update to version r53607 or later. For Google Chrome versions before 4.0.249.89, update to version 4.0.249.89 or later.

Exploit

Correção

Identificadores relacionados

CVE-2010-0315

Produtos afetados

Google Chrome

Webkit

Referências · 18

• 🔥 https://exploit-db.com/exploits/33562 · Exploit
• 🔥 http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html · Exploit
• http://secunia.com/advisories/43068 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14452 · Nota
• http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs · Nota
• http://securitytracker.com/id?1023583 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0212 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56215 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0315 · Nota de Segurança
• http://code.google.com/p/chromium/issues/detail?id=32309 · Nota
• http://securityfocus.com/bid/38177 · Nota
• https://bugs.webkit.org/show_bug.cgi?id=33683 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55683 · Nota
• http://secunia.com/advisories/38545 · Aviso do Fabricante