← Back

CVE-2010-0315

nvd nist
Published: Jan 14, 2010Modified: Apr 23, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value, related to an IFRAME element.

Affected (47)

Products: Google: Chrome
Google
1 product
Chrome
Configuration A
47 vulnerable
Vulnerable SoftwareAffected Versions
Google
Chrome
Up to 4.0.249.78
Chrome
Version 0.2.149.27
Chrome
Version 0.2.149.29
Chrome
Version 0.2.149.30
Chrome
Version 0.2.152.1
Chrome
Version 0.2.153.1
Chrome
Version 0.3.154.0
Chrome
Version 0.3.154.3
Chrome
Version 0.4.154.18
Chrome
Version 0.4.154.22
Chrome
Version 0.4.154.31
Chrome
Version 0.4.154.33
Chrome
Version 1.0.154.36
Chrome
Version 1.0.154.39
Chrome
Version 1.0.154.42
Chrome
Version 1.0.154.43
Chrome
Version 1.0.154.46
Chrome
Version 1.0.154.48
Chrome
Version 1.0.154.52
Chrome
Version 1.0.154.53
Chrome
Version 1.0.154.59
Chrome
Version 1.0.154.65
Chrome
Version 2.0.156.1
Chrome
Version 2.0.157.0
Chrome
Version 2.0.157.2
Chrome
Version 2.0.158.0
Chrome
Version 2.0.159.0
Chrome
Version 2.0.169.0
Chrome
Version 2.0.169.1
Chrome
Version 2.0.170.0
Chrome
Version 2.0.172.27
Chrome
Version 2.0.172.28
Chrome
Version 2.0.172.2
Chrome
Version 2.0.172.30
Chrome
Version 2.0.172.31
Chrome
Version 2.0.172.33
Chrome
Version 2.0.172.37
Chrome
Version 2.0.172.38
Chrome
Version 2.0.172.8
Chrome
Version 2.0.172
Chrome
Version 3.0.182.2
Chrome
Version 3.0.190.2
Chrome
Version 3.0.193.2 beta
Chrome
Version 3.0.195.21
Chrome
Version 3.0.195.24
Chrome
Version 3.0.195.32
Chrome
Version 3.0.195.33

References (32)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.