CVE

Id
43244  
CVE No.
CVE-2010-0660  
Status
Candidate  
Description
Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging.  
Phase
Assigned (20100218)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
471214 43244 CVE-2010-0660 CONFIRM:http://code.google.com/p/chromium/issues/detail?id=29920  View
471215 43244 CVE-2010-0660 CONFIRM:http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html  View
471216 43244 CVE-2010-0660 CONFIRM:http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs  View
471217 43244 CVE-2010-0660 OVAL:oval:org.mitre.oval:def:14247  View
471218 43244 CVE-2010-0660 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14247  View
471219 43244 CVE-2010-0660 SECTRACK:1023506  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36613 JVNDB-2010-002393 Google Chrome の ChildProcessSecurityPolicy::CanRequestURL 関数におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome の browser/child_process_security_policy.cc 内にある ChildProcessSecurityPolicy::CanRequestURL 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-0664 43244 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002393.html  View