CVE

Id
37809  
CVE No.
CVE-2009-0374  
Status
Candidate  
Description
** DISPUTED ** Google Chrome 1.0.154.43 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Clickjacking" vulnerability. NOTE: a third party disputes the relevance of this issue, stating that "every sufficiently featured browser is and likely will remain susceptible to the behavior known as clickjacking," and adding that the exploit code "is not a valid demonstration of the issue."  
Phase
Assigned (20090130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
410895 37809 CVE-2009-0374 BUGTRAQ:20090128 Advisory: Google Chrome 1.0.154.43 ClickJacking Vulnerability.  View
410896 37809 CVE-2009-0374 URL:http://www.securityfocus.com/archive/1/archive/1/500499/100/0/threaded  View
410897 37809 CVE-2009-0374 BUGTRAQ:20090128 Re: Advisory: Google Chrome 1.0.154.43 ClickJacking Vulnerability.  View
410898 37809 CVE-2009-0374 URL:http://www.securityfocus.com/archive/1/archive/1/500533/100/0/threaded  View
410899 37809 CVE-2009-0374 MILW0RM:7903  View
410900 37809 CVE-2009-0374 URL:http://www.milw0rm.com/exploits/7903  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40571 JVNDB-2009-001577 Joomla! 用 beamospetition (com_beamospetition) コンポーネントの index.php におけるクロスサイトスクリプティングの脆弱性 Joomla! 用 beamospetition (com_beamospetition) コンポーネントの index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-0378 37809 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001577.html  View