Lucene search
K

Google Chrome Click Jacking

🗓️ 28 Jan 2009 00:00:00Reported by Aditya K SoodType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 20 Views

Google Chrome vulnerable to clickjacking fla

Code
`Version Affected:  
Chrome/1.0.154.43 and previous too  
  
Description:  
The Google chrome browser is vulnerable to clickjacking flaw.A  
clickjacked page tricks a user into performing  
undesired actions by clicking on a concealed link. attackers can trick  
users into performing actions which the  
users never intended to do and there is no way of tracing such actions  
later, as the user was genuinely  
authenticated on the other page.  
  
Proof of Concept:  
http://www.secniche.org/gcr_clkj  
  
Detection:  
SecNiche confirmed this vulnerability affects Google Chrome on Microsoft  
Windows XP SP2 platform.The  
versions tested are: Chrome/1.0.154.43  
  
Disclosure Timeline:  
Disclosed: 27 January 2009  
Release Date. 28 January 2009  
  
Vendor Response:  
Google acknowledges this vulnerability and already working on it.  
  
Credit:  
Aditya K Sood  
  
Disclaimer:  
The information in the advisory is believed to be accurate at the time  
of publishing based on currently  
available information. Use of the information constitutes acceptance for  
use in an AS IS condition. There is  
no representation or warranties, either express or implied by or with  
respect to anything in this document,  
and shall not be liable for a ny implied warranties of merchantability  
or fitness for a particular purpose or for  
any indirect special or consequential damages.  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation