Lucene search

PRIOn knowledge basePRION:CVE-2010-3115

HistoryAug 24, 2010 - 8:00 p.m.

Authorization

2010-08-2420:00:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.4%

JSON

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote attackers to spoof the address bar via unspecified vectors.

CPENameOperatorVersion
ubuntu_linuxeq10.10
ubuntu_linuxeq9.10
ubuntu_linuxeq10.04
chromelt5.0.375.127
webkitgtklt1.2.6

Name	Operator	Version
ubuntu_linux	eq	10.10
ubuntu_linux	eq	9.10
ubuntu_linux	eq	10.04
chrome	lt	5.0.375.127
webkitgtk	lt	1.2.6

References

secunia.com/advisories/41856

secunia.com/advisories/43086

www.mandriva.com/security/advisories?name=MDVSA-2011:039

www.redhat.com/support/errata/RHSA-2011-0177.html

www.securityfocus.com/bid/44203

www.ubuntu.com/usn/USN-1006-1

www.vupen.com/english/advisories/2010/2722

www.vupen.com/english/advisories/2011/0216

www.vupen.com/english/advisories/2011/0552

code.google.com/p/chromium/issues/detail?id=49964

googlechromereleases.blogspot.com/2010/08/stable-channel-update_19.html

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11953