CVE-2011-0778

Google Chrome before 9.0.597.84 does not properly restrict drag and drop operations, which might allow remote attackers to bypass the Same Origin Policy via unspecified vectors.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://googlechromereleases.blogspot.com/2011/02/stable-channel-update.html	Vendor Advisory
http://code.google.com/p/chromium/issues/detail?id=59081
http://www.vupen.com/english/advisories/2011/0408
http://www.debian.org/security/2011/dsa-2166
http://secunia.com/advisories/43368
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
http://www.debian.org/security/2011/dsa-2188
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14228

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Information

Published : 2011-02-04 10:00

Updated : 2017-09-18 18:32

NVD link : CVE-2011-0778

Mitre link : CVE-2011-0778

JSON object : View

CWE

CWE-264

Permissions, Privileges, and Access Controls

Advertisement

Products Affected

google

chrome

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://googlechromereleases.blogspot.com/2011/02/stable-channel-update.html", "name": "http://googlechromereleases.blogspot.com/2011/02/stable-channel-update.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://code.google.com/p/chromium/issues/detail?id=59081", "name": "http://code.google.com/p/chromium/issues/detail?id=59081", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.vupen.com/english/advisories/2011/0408", "name": "ADV-2011-0408", "tags": [], "refsource": "VUPEN"}, {"url": "http://www.debian.org/security/2011/dsa-2166", "name": "DSA-2166", "tags": [], "refsource": "DEBIAN"}, {"url": "http://secunia.com/advisories/43368", "name": "43368", "tags": [], "refsource": "SECUNIA"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html", "name": "SUSE-SR:2011:009", "tags": [], "refsource": "SUSE"}, {"url": "http://www.debian.org/security/2011/dsa-2188", "name": "DSA-2188", "tags": [], "refsource": "DEBIAN"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14228", "name": "oval:org.mitre.oval:def:14228", "tags": [], "refsource": "OVAL"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Google Chrome before 9.0.597.84 does not properly restrict drag and drop operations, which might allow remote attackers to bypass the Same Origin Policy via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-264"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2011-0778", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2011-02-04T18:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "9.0.597.83"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-09-19T01:32Z"}