CVE Vulnerabilities

CVE-2010-0556

Published: Feb 18, 2010 | Modified: Oct 10, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

browser/login/login_prompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication, as demonstrated by a URL in the SRC attribute of an IMG element.

Affected Software

Name Vendor Start Version End Version
Chrome Google 2.0.172.8 2.0.172.8
Chrome Google 0.3.154.3 0.3.154.3
Chrome Google 3.0.182.2 3.0.182.2
Chrome Google 0.2.149.30 0.2.149.30
Chrome Google 0.4.154.31 0.4.154.31
Chrome Google 1.0.154.39 1.0.154.39
Chrome Google 2.0.172.38 2.0.172.38
Chrome Google 1.0.154.59 1.0.154.59
Chrome Google 0.2.149.27 0.2.149.27
Chrome Google 1.0.154.53 1.0.154.53
Chrome Google 0.4.154.33 0.4.154.33
Chrome Google 2.0.170.0 2.0.170.0
Chrome Google 1.0.154.43 1.0.154.43
Chrome Google 1.0.154.42 1.0.154.42
Chrome Google 2.0.169.1 2.0.169.1
Chrome Google 2.0.172.33 2.0.172.33
Chrome Google 3.0.195.24 3.0.195.24
Chrome Google 3.0.195.33 3.0.195.33
Chrome Google 1.0.154.52 1.0.154.52
Chrome Google 2.0.172.27 2.0.172.27
Chrome Google 1.0.154.65 1.0.154.65
Chrome Google 2.0.157.2 2.0.157.2
Chrome Google 0.4.154.18 0.4.154.18
Chrome Google 0.2.149.29 0.2.149.29
Chrome Google 2.0.157.0 2.0.157.0
Chrome Google 0.2.152.1 0.2.152.1
Chrome Google 0.3.154.0 0.3.154.0
Chrome Google * 4.0.249.78
Chrome Google 0.2.153.1 0.2.153.1
Chrome Google 2.0.172.2 2.0.172.2
Chrome Google 3.0.195.21 3.0.195.21
Chrome Google 2.0.169.0 2.0.169.0
Chrome Google 1.0.154.36 1.0.154.36
Chrome Google 2.0.172 2.0.172
Chrome Google 2.0.172.30 2.0.172.30
Chrome Google 3.0.193.2 3.0.193.2
Chrome Google 2.0.156.1 2.0.156.1
Chrome Google 3.0.195.32 3.0.195.32
Chrome Google 1.0.154.46 1.0.154.46
Chrome Google 3.0.190.2 3.0.190.2
Chrome Google 0.4.154.22 0.4.154.22
Chrome Google 2.0.159.0 2.0.159.0
Chrome Google 2.0.158.0 2.0.158.0
Chrome Google 2.0.172.28 2.0.172.28
Chrome Google 2.0.172.31 2.0.172.31
Chrome Google 1.0.154.48 1.0.154.48
Chrome Google 2.0.172.37 2.0.172.37

References