CVEvulnerability
CVE-2010-1230
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-04-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-200
Description
Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.
Affected configurations
• google chrome (< 4.1.249.1036)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://code.google.com/p/chromium/issues/detail?id=30801 Vendor Advisory
- http://code.google.com/p/chromium/issues/detail?id=33445 Vendor Advisory
- http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14292 Third Party Advisory
- http://code.google.com/p/chromium/issues/detail?id=30801 Vendor Advisory
- http://code.google.com/p/chromium/issues/detail?id=33445 Vendor Advisory
- http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14292 Third Party Advisory