medium4.3
CVE-2011-2361
The Basic Authentication dialog implementation in Google Chrome before 13.0.782.107 does not properly handle strings, which might make it easier for remote att…
Impact
The Basic Authentication dialog implementation in Google Chrome before 13.0.782.107 does not properly handle strings, which might make it easier for remote attackers to capture credentials via a crafted web site.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | before 13.0.782.107 |
Weakness classification
References
- NVD record
- CVE.org record
- http://code.google.com/p/chromium/issues/detail?id=79426
- http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html
- http://osvdb.org/74231
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68943
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14595