Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-2298
HistoryJun 15, 2010 - 6:00 p.m.

CVE-2010-2298

2010-06-1518:00:02
CWE-20
[email protected]
web.nvd.nist.gov
22
google chrome
linux
viewhostmsg_databaseopenfile
sandboxing
cve-2010-2298

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.3%

JSON

browser/renderer_host/database_dispatcher_host.cc in Google Chrome before 5.0.375.70 on Linux does not properly handle ViewHostMsg_DatabaseOpenFile messages in chroot-based sandboxing, which allows remote attackers to bypass intended sandbox restrictions via vectors involving fchdir and chdir calls.

Affected configurations

NVD
Node
googlechromeRange<5.0.375.70
AND
linuxlinux_kernelMatch-
CPENameOperatorVersion
google:chromegoogle chromelt5.0.375.70

Related

prion 1
debiancve 1
ubuntucve 1
cvelist 1
nvd 1
openvas 3
nessus 1
prion
prion
Input validation
2010-06-15 18:00:00
debiancve
debiancve
CVE-2010-2298
2010-06-15 18:00:00
ubuntucve
ubuntucve
CVE-2010-2298
2010-06-15 00:00:00
cvelist
cvelist
CVE-2010-2298
2010-06-15 17:48:00
nvd
nvd
CVE-2010-2298
2010-06-15 18:00:02
openvas
openvas
Google Chrome 'WebKit' Multiple Vulnerabilities (Linux) - Sep 10
2010-10-01 00:00:00
Google Chrome 'WebKit' Multiple Vulnerabilities (Sep 2010) - Linux
2010-10-01 00:00:00
Google Chrome 'WebKit' Multiple Vulnerabilities (Jun 2010) - Windows
2010-06-22 00:00:00
nessus
nessus
Google Chrome < 5.0.375.70 Multiple Vulnerabilities
2010-06-09 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.3%

JSON
Related for CVE-2010-2298
prion1debiancve1ubuntucve1cvelist1nvd1openvas3nessus1