Vulnerability · NVD

CVE-2010-0661

CVE-2010-0661, Severity pending severity (CVSS —): 3 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS): -
Exploitation: 1.6 %
Tracked apps: 3
Still exposed: 0

Published on 2010-02-18

WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.

EPSS 1.59% above median percentile 73.9%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Safari macOS com.apple.Safari

Affected - Fixed in - Latest tracked - undetermined
Chrome macOS com.google.Chrome

Affected ≤4.0.249.0 Fixed in > 4.0.249.0 Latest tracked - undetermined
Google Chrome Windows winget:Google.Chrome

Affected ≤4.0.249.0 Fixed in > 4.0.249.0 Latest tracked 152.0.7977.65 patched

Vulnerable CPE configurations (97)

Vendor	Product	Platform	Versions	CPE 2.3 URI
apple	webkit All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:apple:webkit:52400:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	≤4.0.249.0	cpe:2.3:a:google:chrome::::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	≤4.0.249.0	cpe:2.3:a:google:chrome::::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.29:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.29:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.30:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.149.30:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.152.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.152.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.153.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.2.153.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.3:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.3.154.3:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.18:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.18:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.22:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.22:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:0.4.154.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.36:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.36:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.39:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.39:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.42:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.42:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.43:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.43:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.46:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.46:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.48:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.48:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.52:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.52:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.53:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.53:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.59:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.59:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.65:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:1.0.154.65:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.156.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.156.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.157.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.157.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.157.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.157.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.158.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.158.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.159.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.159.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.169.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.169.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.169.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.169.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.170.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.170.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.8:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.8:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.28:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.28:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.30:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.30:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.37:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.37:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.38:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:2.0.172.38:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.182.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.182.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.190.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.190.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.193.2:beta::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.193.2:beta::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.21:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.21:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.24:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.24:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.32:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.32:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:3.0.195.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:4.0.244.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:4.0.244.0:::::::*

View on NVD ↗ Advisory · sites.google.com Advisory · googlechromereleases.blogspot.com Advisory · trac.webkit.org