Vulnerability · NVD

CVE-2009-3456

CVE-2009-3456, Severity pending severity (CVSS —): 2 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS): -
Exploitation: 0.4 %
Tracked apps: 2
Still exposed: 0

Published on 2009-09-29

Google Chrome, possibly 3.0.195.21 and earlier, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

EPSS 0.40% exploit very unlikely percentile 33.5%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Chrome macOS com.google.Chrome

Affected ≤3.0.195.21 Fixed in > 3.0.195.21 Latest tracked - undetermined
Google Chrome Windows winget:Google.Chrome

Affected ≤3.0.195.21 Fixed in > 3.0.195.21 Latest tracked 152.0.7977.65 patched

Vulnerable CPE configurations (86)

Vendor	Product	Platform	Versions	CPE 2.3 URI
google	chrome All platforms (wildcard)	All platforms (wildcard)	≤3.0.195.21	cpe:2.3:a:google:chrome::::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	≤3.0.195.21	cpe:2.3:a:google:chrome::::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.29:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.29:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.30:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.30:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.152.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.152.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.153.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.153.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.3:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.3:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.18:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.18:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.22:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.22:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.36:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.36:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.39:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.39:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.42:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.42:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.43:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.43:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.46:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.46:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.48:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.48:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.52:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.52:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.53:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.53:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.59:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.59:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.65:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.65:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.156.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.156.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.157.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.157.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.157.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.157.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.158.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.158.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.159.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.159.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.169.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.169.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.169.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.169.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.170.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.170.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.8:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.8:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.28:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.28:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.30:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.30:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.37:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.37:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.38:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.38:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.182.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.182.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.190.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.190.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.193.2:beta::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.193.2:beta::::::

View on NVD ↗