CVE-2011-3022

Опубликовано: 16 фев. 2012

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

translate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network.

Ссылки

http://code.google.com/p/chromium/issues/detail?id=112236
Broken Link
http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html
Release Notes
Vendor Advisory
http://googlechromereleases.blogspot.com/2012/02/dev-channel-update_10.html
Release Notes
Vendor Advisory
http://secunia.com/advisories/48016
Not Applicable
http://src.chromium.org/viewvc/chrome?view=rev&revision=120113
Issue Tracking
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15025
Third Party Advisory
http://code.google.com/p/chromium/issues/detail?id=112236
Broken Link
http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html
Release Notes
Vendor Advisory
http://googlechromereleases.blogspot.com/2012/02/dev-channel-update_10.html
Release Notes
Vendor Advisory
http://secunia.com/advisories/48016
Not Applicable
http://src.chromium.org/viewvc/chrome?view=rev&revision=120113
Issue Tracking
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15025
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 17.0.963.56 (исключая)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия от 19.0 (включая) до 19.0.1036.7 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:google:chrome:19.0.1028.0:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:19.0.1029.0:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:19.0.1030.0:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:19.0.1031.0:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:19.0.1032.0:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:19.0.1033.0:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:19.0.1034.0:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:19.0.1035.0:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:19.0.1036.0:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:19.0.1036.2:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:19.0.1036.3:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:19.0.1036.4:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:19.0.1036.6:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00461

Низкий

5 Medium

CVSS2

Дефекты

CWE-319

Связанные уязвимости

CVE-2011-3022

ubuntu

почти 14 лет назад

CVE-2011-3022

debian

почти 14 лет назад

translate/translate_manager.cc in Google Chrome before 17.0.963.56 and ...

GHSA-69c8-vw69-gcq3

github

больше 3 лет назад

EPSS

Процентиль: 64%

0.00461

Низкий

5 Medium

CVSS2

Дефекты

CWE-319