PT-2010-2413 · Google+1 · Google Chrome+1

Tokuji Akamine · Publicado 2010-02-18 · Atualizado 2017-09-19 · CVE-2010-0661

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WebKit versions before r52401 Google Chrome versions before 4.0.249.78

Description The issue allows remote attackers to bypass the Same Origin Policy. This is achieved via vectors involving the window.open method.

Recommendations For WebKit versions before r52401, update to version r52401 or later. For Google Chrome versions before 4.0.249.78, update to version 4.0.249.78 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-0661

Produtos afetados

Google Chrome

Webkit

Referências · 12

• https://bugs.webkit.org/show_bug.cgi?id=32647 · Nota
• http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html · Correção
• http://vupen.com/english/advisories/2011/0212 · Nota
• http://trac.webkit.org/changeset/52401 · Correção
• http://code.google.com/p/chromium/issues/detail?id=30660 · Nota
• http://securitytracker.com/id?1023506 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html · Aviso do Fabricante
• http://secunia.com/advisories/43068 · Nota
• http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs · Aviso do Fabricante
• http://flock.com/security · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0661 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14482 · Nota