PT-2010-2936 · Google · Google Chrome

Rsnake · Publicado 2010-04-01 · Atualizado 2018-11-16 · CVE-2010-1230

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 4.1.249.1036

Description The issue concerns Google Chrome's handling of attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state. The impact and attack vectors of this issue are not specified.

Recommendations For versions prior to 4.1.249.1036, update to version 4.1.249.1036 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2010-1230

Produtos afetados

Google Chrome

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2010-1230 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14292 · Nota
• http://code.google.com/p/chromium/issues/detail?id=30801 · Aviso do Fabricante
• http://code.google.com/p/chromium/issues/detail?id=33445 · Aviso do Fabricante
• http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html · Nota