#VU33976 Input validation error in Google Chrome - CVE-2010-3115 

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU33976

#VU33976 Input validation error in Google Chrome - CVE-2010-3115

Published: August 24, 2010 / Updated: August 4, 2020


Vulnerability identifier: #VU33976
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2010-3115
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Google Chrome
Software vendor:
Google

Description

The vulnerability allows a remote non-authenticated attacker to manipulate data.

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote attackers to spoof the address bar via unspecified vectors.


Remediation

Install update from vendor's website.

External links