PT-2010-2412 · Google · Google Chrome

Published 2010-02-18 · Updated 2017-09-19 · CVE-2010-0660

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 4.0.249.78

Description The issue allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging when Google Chrome sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection.

Recommendations For versions prior to 4.0.249.78, update to version 4.0.249.78 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2010-0660

Affected Products

Google Chrome

References · 6

• http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2010-0660 · Security Note
• http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs · Vendor Advisory
• http://code.google.com/p/chromium/issues/detail?id=29920 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14247 · Note
• http://securitytracker.com/id?1023506 · Note