PT-2009-3033 · Google · Google Chrome

X0X · CVE-2009-0374 · Published 2009-01-30 · Updated 2024-08-07

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome version 1.0.154.43

Description The issue allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Clickjacking" vulnerability. A third party disputes the relevance of this issue, stating that every sufficiently featured browser is and likely will remain susceptible to the behavior known as clickjacking, and adding that the exploit code is not a valid demonstration of the issue.

Recommendations For Google Chrome version 1.0.154.43, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2009-0374

Affected Products

Google Chrome

References · 6

• 🔥 https://exploit-db.com/exploits/7903 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-0374 · Security Note
• http://securityfocus.com/archive/1/500533/100/0/threaded · Note
• http://secniche.org/gcr_clkj · Note
• http://securityfocus.com/archive/1/500499/100/0/threaded · Note
• https://t.me/cvenotify/89575 · Telegram Post