CVE-2010-3115

Published: Aug 24, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote attackers to spoof the address bar via unspecified vectors.

Affected (5)

Products: Google: Chrome · Webkitgtk: Webkitgtk · Canonical: Ubuntu Linux

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Before 5.0.375.127

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Webkitgtk Webkitgtk	Before 1.2.6

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 10.10
Canonical Ubuntu Linux	Version 9.10

References (24)

http://code.google.com/p/chromium/issues/detail?id=49964

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://googlechromereleases.blogspot.com/2010/08/stable-channel-update_19.html

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/41856

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/43086

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2011-0177.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/44203

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-1006-1

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2010/2722

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2011/0216

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2011/0552

Source: cve@mitre.org

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11953

Source: cve@mitre.org

Third Party Advisory

http://code.google.com/p/chromium/issues/detail?id=49964