Lucene search

K
cve[email protected]CVE-2009-0374
HistoryJan 30, 2009 - 9:30 p.m.

CVE-2009-0374

2009-01-3021:30:00
web.nvd.nist.gov
27
google chrome
clickjacking
vulnerability
cve-2009-0374
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.0%

Google Chrome 1.0.154.43 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a “Clickjacking” vulnerability. NOTE: a third party disputes the relevance of this issue, stating that “every sufficiently featured browser is and likely will remain susceptible to the behavior known as clickjacking,” and adding that the exploit code "is not a valid demonstration of the issue.

Affected configurations

NVD
Node
googlechromeMatch1.0.154.43
CPENameOperatorVersion
google:chromegoogle chromeeq1.0.154.43

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.0%

Related for CVE-2009-0374