PT-2010-2106 · Google+1 · Google Chrome+1

Cesar Cerrudo · Published 2010-01-14 · Updated 2017-09-19 · CVE-2010-0315

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WebKit versions before r53607 Google Chrome versions before 4.0.249.89

Description The issue allows remote attackers to discover a redirect's target URL for a specific user's session on a web site. This is achieved by placing the site's URL in the HREF attribute of a stylesheet LINK element within an IFRAME element, and then reading the document.styleSheets[0].href property value.

Recommendations For WebKit versions before r53607, update to version r53607 or later. For Google Chrome versions before 4.0.249.89, update to version 4.0.249.89 or later.

Exploit

Fix

Related Identifiers

CVE-2010-0315

Affected Products

Google Chrome

Webkit

References · 18

• 🔥 https://exploit-db.com/exploits/33562 · Exploit
• 🔥 http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html · Exploit
• http://secunia.com/advisories/43068 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html · Vendor Advisory
• http://vupen.com/english/advisories/2011/0212 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0315 · Security Note
• http://secunia.com/advisories/38545 · Vendor Advisory
• http://vupen.com/english/advisories/2010/0361 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14452 · Note
• http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs · Note
• http://securitytracker.com/id?1023583 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56215 · Note
• http://code.google.com/p/chromium/issues/detail?id=32309 · Note
• http://securityfocus.com/bid/38177 · Note
• https://bugs.webkit.org/show_bug.cgi?id=33683 · Note