PT-2011-2872 · Google+1 · Google Chrome+1

Jordi Chancel · Published 2011-03-01 · Updated 2020-06-03 · CVE-2011-1107

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 9.0.597.107

Description The issue allows remote attackers to spoof the URL bar via unknown vectors.

Recommendations For versions prior to 9.0.597.107, update to version 9.0.597.107 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2011-1107

Affected Products

Google Chrome

Safari

References · 11

• 🔥 http://code.google.com/p/chromium/issues/detail?id=54262 · Exploit
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html · Vendor Advisory
• http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_28.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1107 · Security Note
• http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html · Vendor Advisory
• http://xforce.iss.net/xforce/xfdb/65725 · Note
• http://securityfocus.com/bid/46614 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14322 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65725 · Note
• http://support.apple.com/kb/HT4808 · Note
• http://support.apple.com/kb/HT4999 · Note