NVD

Id
13773  
Name
CVE-2010-2295  
Description
page/EventHandler.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 does not properly handle a change of the focused frame during the dispatching of keydown, which allows user-assisted remote attackers to redirect keystrokes via a crafted HTML document, aka rdar problem 7018610. NOTE: this might overlap CVE-2010-1422.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-06-15  
Modified Date
2011-07-18  
Seq
2010-2295  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
76610 13773 CVE-2010-2295 http://code.google.com/p/chromium/issues/detail?id=15766  View
76611 13773 CVE-2010-2295 http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html  View
76612 13773 CVE-2010-2295 SUSE-SR:2011:002  View
76613 13773 CVE-2010-2295 oval:org.mitre.oval:def:12003  View
76614 13773 CVE-2010-2295 http://src.chromium.org/viewvc/chrome/branches/WebKit/375/WebCore/page/EventHandler.cpp?r1=48067&r2=48066  View
76615 13773 CVE-2010-2295 ADV-2011-0212  View
76616 13773 CVE-2010-2295 https://bugs.webkit.org/show_bug.cgi?id=26824  View
76617 13773 CVE-2010-2295 https://bugzilla.mozilla.org/show_bug.cgi?id=552255  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36575 JVNDB-2010-002355 Google Chrome の WebKit 内にある page/EventHandler.cpp におけるキーストロークをリダイレクトされる脆弱性 Google Chrome の WebKit 内にある WebCore の page/EventHandler.cpp には、keydown 送信中にフォーカスされたフレームの変更を適切に処理しないため、キーストロークをリダイレクトされる脆弱性が存在します。 CVE-2010-2295 44875 CVE-2010-2295 13773 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002355.html 2010-06-08 2010-11-24 View