CVE-2010-1230

Published: Apr 1, 2010Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.

Affected (1)

Products: Google: Chrome

Google

1 product

Chrome

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Before 4.1.249.1036

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (8)

http://code.google.com/p/chromium/issues/detail?id=30801

Source: cve@mitre.org

Vendor Advisory

http://code.google.com/p/chromium/issues/detail?id=33445

Source: cve@mitre.org

Vendor Advisory

http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html

Source: cve@mitre.org

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14292

Source: cve@mitre.org

Third Party Advisory

http://code.google.com/p/chromium/issues/detail?id=30801

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://code.google.com/p/chromium/issues/detail?id=33445

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14292

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.