Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a cookie forcing issue.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Chrome | * | 3.0.195.38 (including) | |
| Chrome | 0.1.38.1 (including) | 0.1.38.1 (including) | |
| Chrome | 0.1.38.2 (including) | 0.1.38.2 (including) | |
| Chrome | 0.1.38.4 (including) | 0.1.38.4 (including) | |
| Chrome | 0.1.40.1 (including) | 0.1.40.1 (including) | |
| Chrome | 0.1.42.2 (including) | 0.1.42.2 (including) | |
| Chrome | 0.1.42.3 (including) | 0.1.42.3 (including) | |
| Chrome | 0.2.149.27 (including) | 0.2.149.27 (including) | |
| Chrome | 0.2.149.29 (including) | 0.2.149.29 (including) | |
| Chrome | 0.2.149.30 (including) | 0.2.149.30 (including) | |
| Chrome | 0.2.152.1 (including) | 0.2.152.1 (including) | |
| Chrome | 0.2.153.1 (including) | 0.2.153.1 (including) | |
| Chrome | 0.3.154.0 (including) | 0.3.154.0 (including) | |
| Chrome | 0.3.154.3 (including) | 0.3.154.3 (including) | |
| Chrome | 0.4.154.18 (including) | 0.4.154.18 (including) | |
| Chrome | 0.4.154.22 (including) | 0.4.154.22 (including) | |
| Chrome | 0.4.154.31 (including) | 0.4.154.31 (including) | |
| Chrome | 0.4.154.33 (including) | 0.4.154.33 (including) | |
| Chrome | 1.0.154.36 (including) | 1.0.154.36 (including) | |
| Chrome | 1.0.154.39 (including) | 1.0.154.39 (including) | |
| Chrome | 1.0.154.42 (including) | 1.0.154.42 (including) | |
| Chrome | 1.0.154.43 (including) | 1.0.154.43 (including) | |
| Chrome | 1.0.154.46 (including) | 1.0.154.46 (including) | |
| Chrome | 1.0.154.48 (including) | 1.0.154.48 (including) | |
| Chrome | 1.0.154.52 (including) | 1.0.154.52 (including) | |
| Chrome | 1.0.154.53 (including) | 1.0.154.53 (including) | |
| Chrome | 1.0.154.59 (including) | 1.0.154.59 (including) | |
| Chrome | 1.0.154.64 (including) | 1.0.154.64 (including) | |
| Chrome | 1.0.154.65 (including) | 1.0.154.65 (including) | |
| Chrome | 2.0.156.1 (including) | 2.0.156.1 (including) | |
| Chrome | 2.0.157.0 (including) | 2.0.157.0 (including) | |
| Chrome | 2.0.157.2 (including) | 2.0.157.2 (including) | |
| Chrome | 2.0.158.0 (including) | 2.0.158.0 (including) | |
| Chrome | 2.0.159.0 (including) | 2.0.159.0 (including) | |
| Chrome | 2.0.169.0 (including) | 2.0.169.0 (including) | |
| Chrome | 2.0.169.1 (including) | 2.0.169.1 (including) | |
| Chrome | 2.0.170.0 (including) | 2.0.170.0 (including) | |
| Chrome | 2.0.172 (including) | 2.0.172 (including) | |
| Chrome | 2.0.172.2 (including) | 2.0.172.2 (including) | |
| Chrome | 2.0.172.8 (including) | 2.0.172.8 (including) | |
| Chrome | 2.0.172.27 (including) | 2.0.172.27 (including) | |
| Chrome | 2.0.172.28 (including) | 2.0.172.28 (including) | |
| Chrome | 2.0.172.30 (including) | 2.0.172.30 (including) | |
| Chrome | 2.0.172.31 (including) | 2.0.172.31 (including) | |
| Chrome | 2.0.172.33 (including) | 2.0.172.33 (including) | |
| Chrome | 2.0.172.37 (including) | 2.0.172.37 (including) | |
| Chrome | 2.0.172.38 (including) | 2.0.172.38 (including) | |
| Chrome | 3.0.182.2 (including) | 3.0.182.2 (including) | |
| Chrome | 3.0.190.2 (including) | 3.0.190.2 (including) | |
| Chrome | 3.0.193.2-beta (including) | 3.0.193.2-beta (including) | |
| Chrome | 3.0.195.2 (including) | 3.0.195.2 (including) | |
| Chrome | 3.0.195.21 (including) | 3.0.195.21 (including) | |
| Chrome | 3.0.195.24 (including) | 3.0.195.24 (including) | |
| Chrome | 3.0.195.25 (including) | 3.0.195.25 (including) | |
| Chrome | 3.0.195.27 (including) | 3.0.195.27 (including) | |
| Chrome | 3.0.195.32 (including) | 3.0.195.32 (including) | |
| Chrome | 3.0.195.33 (including) | 3.0.195.33 (including) | |
| Chrome | 3.0.195.36 (including) | 3.0.195.36 (including) | |
| Chrome | 3.0.195.37 (including) | 3.0.195.37 (including) | |
| Chromium-browser | Ubuntu | lucid | * |
| Chromium-browser | Ubuntu | maverick | * |
| Chromium-browser | Ubuntu | natty | * |
| Chromium-browser | Ubuntu | oneiric | * |