CVE-2010-0556

CVE-2010-0556 describes a cross-origin weakness in Google Chrome’s Password Manager where credentials stored for one site could be populated into an authentication dialog triggered by a third-party page (demonstrated via IMG src). Affected versions include Chrome 3.0.195.38 and 4.0.249.78; Chrome...

Chrome Password Manager Cross Origin Weakness (CVE-2010-0556)

Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: Chrome Password Manager Cross Origin Weakness Release Date: 2010-02-15 Application: Google Chrome Web Browser Versions:...