Vulnerability · NVD

CVE-2008-7294

CVE-2008-7294, Severity pending severity (CVSS —): 2 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS): -
Exploitation: 1.0 %
Tracked apps: 2
Still exposed: 0

Published on 2011-08-09

Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.

EPSS 1.01% above median percentile 60.7%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Chrome macOS com.google.Chrome

Affected ≤3.0.195.38 Fixed in > 3.0.195.38 Latest tracked - undetermined
Google Chrome Windows winget:Google.Chrome

Affected ≤3.0.195.38 Fixed in > 3.0.195.38 Latest tracked 152.0.7977.65 patched

Vulnerable CPE configurations (118)

Vendor	Product	Platform	Versions	CPE 2.3 URI
google	chrome All platforms (wildcard)	All platforms (wildcard)	≤3.0.195.38	cpe:2.3:a:google:chrome::::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	≤3.0.195.38	cpe:2.3:a:google:chrome::::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.1.38.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.1.38.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.1.38.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.1.38.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.1.38.4:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.1.38.4:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.1.40.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.1.40.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.1.42.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.1.42.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.1.42.3:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.1.42.3:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.29:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.29:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.30:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.30:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.152.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.152.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.153.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.153.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.3:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.3:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.18:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.18:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.22:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.22:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.36:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.36:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.39:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.39:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.42:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.42:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.43:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.43:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.46:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.46:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.48:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.48:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.52:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.52:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.53:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.53:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.59:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.59:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.64:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.64:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.65:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.65:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.156.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.156.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.157.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.157.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.157.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.157.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.158.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.158.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.159.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.159.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.169.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.169.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.169.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.169.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.170.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.170.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.8:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.8:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.28:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.28:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.30:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.30:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.37:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.37:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.38:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.38:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.182.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.182.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.190.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.190.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.193.2:beta::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.193.2:beta::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.21:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.21:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.24:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.24:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.25:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.25:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.32:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.32:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.36:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.36:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.37:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.37:::::::*

View on NVD ↗ Advisory · bugzilla.mozilla.org