6.8

CVE-2010-0661

WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ WebKit Version 52400
Google ≫ Chrome Version <= 4.0.249.0
Google ≫ Chrome Version 0.2.149.27
Google ≫ Chrome Version 0.2.149.29
Google ≫ Chrome Version 0.2.149.30
Google ≫ Chrome Version 0.2.152.1
Google ≫ Chrome Version 0.2.153.1
Google ≫ Chrome Version 0.3.154.0
Google ≫ Chrome Version 0.3.154.3
Google ≫ Chrome Version 0.4.154.18
Google ≫ Chrome Version 0.4.154.22
Google ≫ Chrome Version 0.4.154.31
Google ≫ Chrome Version 0.4.154.33
Google ≫ Chrome Version 1.0.154.36
Google ≫ Chrome Version 1.0.154.39
Google ≫ Chrome Version 1.0.154.42
Google ≫ Chrome Version 1.0.154.43
Google ≫ Chrome Version 1.0.154.46
Google ≫ Chrome Version 1.0.154.48
Google ≫ Chrome Version 1.0.154.52
Google ≫ Chrome Version 1.0.154.53
Google ≫ Chrome Version 1.0.154.59
Google ≫ Chrome Version 1.0.154.65
Google ≫ Chrome Version 2.0.156.1
Google ≫ Chrome Version 2.0.157.0
Google ≫ Chrome Version 2.0.157.2
Google ≫ Chrome Version 2.0.158.0
Google ≫ Chrome Version 2.0.159.0
Google ≫ Chrome Version 2.0.169.0
Google ≫ Chrome Version 2.0.169.1
Google ≫ Chrome Version 2.0.170.0
Google ≫ Chrome Version 2.0.172
Google ≫ Chrome Version 2.0.172.2
Google ≫ Chrome Version 2.0.172.8
Google ≫ Chrome Version 2.0.172.27
Google ≫ Chrome Version 2.0.172.28
Google ≫ Chrome Version 2.0.172.30
Google ≫ Chrome Version 2.0.172.31
Google ≫ Chrome Version 2.0.172.33
Google ≫ Chrome Version 2.0.172.37
Google ≫ Chrome Version 2.0.172.38
Google ≫ Chrome Version 3.0.182.2
Google ≫ Chrome Version 3.0.190.2
Google ≫ Chrome Version 3.0.193.2 Update beta
Google ≫ Chrome Version 3.0.195.21
Google ≫ Chrome Version 3.0.195.24
Google ≫ Chrome Version 3.0.195.32
Google ≫ Chrome Version 3.0.195.33
Google ≫ Chrome Version 4.0.244.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.59% 0.725
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://secunia.com/advisories/43068
http://www.vupen.com/english/advisories/2011/0212
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
Vendor Advisory
http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html
Patch
http://securitytracker.com/id?1023506
http://code.google.com/p/chromium/issues/detail?id=30660
http://flock.com/security/
http://trac.webkit.org/changeset/52401
Patch
https://bugs.webkit.org/show_bug.cgi?id=32647
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14482