medium5.0
CVE-2010-4033
Google Chrome before 7.0.517.41 does not properly implement the autofill and autocomplete functionality, which allows remote attackers to conduct "profile spam…
Impact
Google Chrome before 7.0.517.41 does not properly implement the autofill and autocomplete functionality, which allows remote attackers to conduct "profile spamming" attacks via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | through 7.0.517.40 Versions 6.0.454.0, 6.0.455.0, 6.0.456.0, 6.0.457.0, 6.0.458.0 |
References
- NVD record
- CVE.org record
- http://code.google.com/p/chromium/issues/detail?id=48225
- http://code.google.com/p/chromium/issues/detail?id=51727
- http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html
- http://secunia.com/advisories/41888
- http://www.securityfocus.com/bid/44241
- http://www.vupen.com/english/advisories/2010/2731
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7159
- http://code.google.com/p/chromium/issues/detail?id=48225
- http://code.google.com/p/chromium/issues/detail?id=51727
- http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html
- http://secunia.com/advisories/41888
- http://www.securityfocus.com/bid/44241
- http://www.vupen.com/english/advisories/2010/2731
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7159