NVD

Id
50190  
Name
CVE-2009-2973  
Description
Google Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509 certificate signed with the (1) MD2 or (2) MD4 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary HTTPS servers via a crafted certificate, a related issue to CVE-2009-2409.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-08-27  
Modified Date
2009-09-04  
Seq
2009-2973  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
254046 50190 CVE-2009-2973 http://code.google.com/p/chromium/issues/detail?id=18725  View
254047 50190 CVE-2009-2973 http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html  View
254048 50190 CVE-2009-2973 ADV-2009-2420  View
254049 50190 CVE-2009-2973 google-chrome-algorithm-spoofing(52903)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41596 JVNDB-2009-002603 Google Chrome における任意の HTTPS サーバになりすまされる脆弱性 Google Chrome は、MD2 または MD4 アルゴリズムの署名付き X.509 ルート証明書が付与されたサイトへの SSL 接続を制限しないため、任意の HTTPS サーバになりすまされる脆弱性が存在します。 CVE-2009-2973 40404 CVE-2009-2973 50190 6.4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002603.html 2009-08-25 2010-10-19 View