CVE-2010-3115

Опубликовано: 24 авг. 2010

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote attackers to spoof the address bar via unspecified vectors.

Ссылки

http://code.google.com/p/chromium/issues/detail?id=49964
Exploit
Patch
Vendor Advisory
http://googlechromereleases.blogspot.com/2010/08/stable-channel-update_19.html
Vendor Advisory
http://secunia.com/advisories/41856
Third Party Advisory
http://secunia.com/advisories/43086
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2011-0177.html
Third Party Advisory
http://www.securityfocus.com/bid/44203
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-1006-1
Third Party Advisory
http://www.vupen.com/english/advisories/2010/2722
Third Party Advisory
http://www.vupen.com/english/advisories/2011/0216
Third Party Advisory
http://www.vupen.com/english/advisories/2011/0552
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11953
Third Party Advisory
http://code.google.com/p/chromium/issues/detail?id=49964
Exploit
Patch
Vendor Advisory
http://googlechromereleases.blogspot.com/2010/08/stable-channel-update_19.html
Vendor Advisory
http://secunia.com/advisories/41856
Third Party Advisory
http://secunia.com/advisories/43086
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2011-0177.html
Third Party Advisory
http://www.securityfocus.com/bid/44203
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-1006-1
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 5.0.375.127 (исключая)

Конфигурация 2

cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*

Версия до 1.2.6 (исключая)

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01527

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2010-3115

ubuntu

почти 15 лет назад

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote attackers to spoof the address bar via unspecified vectors.

CVE-2010-3115

redhat

почти 15 лет назад

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote attackers to spoof the address bar via unspecified vectors.

CVE-2010-3115

debian

почти 15 лет назад

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not ...

GHSA-ph5f-gjj4-8w92

github

около 3 лет назад

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote attackers to spoof the address bar via unspecified vectors.

ELSA-2011-0177

oracle-oval

больше 14 лет назад

ELSA-2011-0177: webkitgtk security update (MODERATE)

EPSS

Процентиль: 80%

0.01527

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo