Vulnérabilité · NVD

CVE-2009-3011

CVE-2009-3011, sévérité Sévérité en attente (CVSS —) : 2 apps suivies concernées, toutes corrigées ou à statut indéterminable en version courante.

Gravité (CVSS): -
Exploitation: 0.9 %
Apps suivies: 2
Encore exposées: 0

Publié le 2009-08-31

EN Google Chrome 1.0.154.48 and earlier, 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta does not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header. NOTE: the JavaScript executes outside of the context of the HTTP site.

EPSS 0.94% au-dessus de la médiane percentile 58.4%

Apps suivies liées à cette CVE

Pour chaque app : la plage affectée, la version qui corrige, et où en est l'app suivie aujourd'hui.

Chrome macOS com.google.Chrome

Affecté ≤1.0.154.48 Corrigé > 1.0.154.48 Dernière suivie - indéterminé
Google Chrome Windows winget:Google.Chrome

Affecté ≤1.0.154.48 Corrigé > 1.0.154.48 Dernière suivie 152.0.7977.65 patchée

Configurations CPE vulnérables (40)

Vendor	Produit	Plateforme	Versions	CPE 2.3 URI
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	≤1.0.154.48	cpe:2.3:a:google:chrome::::::::
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	≤1.0.154.48	cpe:2.3:a:google:chrome::::::::
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.27:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.27:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.29:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.29:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.30:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.30:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.2.152.1:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.2.152.1:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.2.153.1:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.2.153.1:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.0:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.0:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.3:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.3:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.18:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.18:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.22:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.22:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.31:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.31:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.33:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.33:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.36:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.36:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.39:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.39:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.42:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.42:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.43:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.43:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.46:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.46:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.28:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.28:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.37:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.37:::::::*
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:3.0.193.2:beta::::::
google	chrome Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	-	cpe:2.3:a:google:chrome:3.0.193.2:beta::::::

Voir sur NVD ↗