NVD

Id
12106  
Name
CVE-2010-0556  
Description
browser/login/login_prompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication, as demonstrated by a URL in the SRC attribute of an IMG element.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-02-18  
Modified Date
2012-01-26  
Seq
2010-0556  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
66714 12106 CVE-2010-0556 http://code.google.com/p/chromium/issues/detail?id=32718  View
66715 12106 CVE-2010-0556 http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html  View
66716 12106 CVE-2010-0556 oval:org.mitre.oval:def:14407  View
66717 12106 CVE-2010-0556 1023583  View
66718 12106 CVE-2010-0556 http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs  View
66719 12106 CVE-2010-0556 20100216 Chrome Password Manager Cross Origin Weakness (CVE-2010-0556)  View
66720 12106 CVE-2010-0556 38177  View
66721 12106 CVE-2010-0556 http://www.vsecurity.com/advisory/20100215-1.txt  View
66722 12106 CVE-2010-0556 ADV-2010-0361  View
66723 12106 CVE-2010-0556 googlechrome-dialogs-phishing(56216)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36618 JVNDB-2010-002398 Google Chrome の browser/login/login_prompt.cc における重要な情報を取得される脆弱性 Google Chrome の browser/login/login_prompt.cc には、異なる Web サイトに関する Password Manager で記憶された認証情報を伴うダイアログを実装することにより、重要な情報を取得される脆弱性が存在します。 CVE-2010-0556 43136 CVE-2010-0556 12106 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002398.html 2010-02-10 2010-11-24 View