Vulnérabilité · NVD
CVE-2009-2352
CVE-2009-2352, sévérité Sévérité en attente (CVSS —) : 2 apps suivies concernées, toutes corrigées ou à statut indéterminable en version courante.
- Gravité (CVSS)
- -
- Exploitation
- 2.0 %
- Apps suivies
- 2
- Encore exposées
- 0
EPSS, prédiction à 30 jours
EN Google Chrome 1.0.154.48 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312. NOTE: it was later reported that 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta are also affected.
EPSS
2.05%
au-dessus de la médiane
percentile 79.8%
Apps suivies liées à cette CVE
Pour chaque app : la plage affectée, la version qui corrige, et où en est l'app suivie aujourd'hui.
-
Affecté ≤1.0.154.48 Corrigé > 1.0.154.48 Dernière suivie - indéterminé
-
Configurations CPE vulnérables (32)
| Vendor | Produit | Plateforme | Versions | CPE 2.3 URI |
|---|---|---|---|---|
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | ≤1.0.154.48 | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | ≤1.0.154.48 | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:* | |
|
chrome Toutes plateformes (wildcard)
|
Toutes plateformes (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:* |