CVE-2010-0315

WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value, related to an IFRAME element.
References
Link Resource
http://code.google.com/p/chromium/issues/detail?id=32309
http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html Exploit
http://secunia.com/advisories/38545 Vendor Advisory
http://secunia.com/advisories/43068 Vendor Advisory
http://securitytracker.com/id?1023583
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
http://trac.webkit.org/changeset/53607
http://www.securityfocus.com/bid/38177
http://www.vupen.com/english/advisories/2010/0361 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0212 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=33683
https://exchange.xforce.ibmcloud.com/vulnerabilities/55683
https://exchange.xforce.ibmcloud.com/vulnerabilities/56215
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14452
http://code.google.com/p/chromium/issues/detail?id=32309
http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html Exploit
http://secunia.com/advisories/38545 Vendor Advisory
http://secunia.com/advisories/43068 Vendor Advisory
http://securitytracker.com/id?1023583
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
http://trac.webkit.org/changeset/53607
http://www.securityfocus.com/bid/38177
http://www.vupen.com/english/advisories/2010/0361 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0212 Vendor Advisory
https://bugs.webkit.org/show_bug.cgi?id=33683
https://exchange.xforce.ibmcloud.com/vulnerabilities/55683
https://exchange.xforce.ibmcloud.com/vulnerabilities/56215
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14452
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*
cpe:2.3:a:google:chrome:3.0.195.21:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:3.0.195.24:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:3.0.195.32:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:3.0.195.33:*:*:*:*:*:*:*

History

21 Nov 2024, 01:11

Type Values Removed Values Added
References () http://code.google.com/p/chromium/issues/detail?id=32309 - () http://code.google.com/p/chromium/issues/detail?id=32309 -
References () http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html - () http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html -
References () http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - () http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html -
References () http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html - Exploit () http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html - Exploit
References () http://secunia.com/advisories/38545 - Vendor Advisory () http://secunia.com/advisories/38545 - Vendor Advisory
References () http://secunia.com/advisories/43068 - Vendor Advisory () http://secunia.com/advisories/43068 - Vendor Advisory
References () http://securitytracker.com/id?1023583 - () http://securitytracker.com/id?1023583 -
References () http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs - () http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs -
References () http://trac.webkit.org/changeset/53607 - () http://trac.webkit.org/changeset/53607 -
References () http://www.securityfocus.com/bid/38177 - () http://www.securityfocus.com/bid/38177 -
References () http://www.vupen.com/english/advisories/2010/0361 - Vendor Advisory () http://www.vupen.com/english/advisories/2010/0361 - Vendor Advisory
References () http://www.vupen.com/english/advisories/2011/0212 - Vendor Advisory () http://www.vupen.com/english/advisories/2011/0212 - Vendor Advisory
References () https://bugs.webkit.org/show_bug.cgi?id=33683 - () https://bugs.webkit.org/show_bug.cgi?id=33683 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/55683 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/55683 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/56215 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/56215 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14452 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14452 -

Information

Published : 2010-01-14 19:30

Updated : 2025-04-09 00:30


NVD link : CVE-2010-0315

Mitre link : CVE-2010-0315

CVE.ORG link : CVE-2010-0315


JSON object : View

Products Affected

google

  • chrome