Vulnerability · NVD
CVE-2009-1413
CVE-2009-1413, Severity pending severity (CVSS —): 2 tracked apps concerned, all fixed or indeterminable on their current version.
- Severity (CVSS)
- -
- Exploitation
- 0.8 %
- Tracked apps
- 2
- Still exposed
- 0
EPSS, predicted over 30 days
Google Chrome 1.0.x does not cancel timeouts upon a page transition, which makes it easier for attackers to conduct Universal XSS attacks by calling setTimeout to trigger future execution of JavaScript code, and then modifying document.location to arrange for JavaScript execution in the context of an arbitrary web site. NOTE: this can be leveraged for a remote attack by exploiting a chromehtml: argument-injection vulnerability.
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
-
Affected - Fixed in - Latest tracked - undetermined
-
Vulnerable CPE configurations (14)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:* |