CVEvulnerability
CVE-2010-3118
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-08-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The autosuggest feature in the Omnibox implementation in Google Chrome before 5.0.375.127 does not anticipate entry of passwords, which might allow remote attackers to obtain sensitive information by reading the network traffic generated by this feature.
Affected configurations
• google chrome (< 5.0.375.127)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://code.google.com/p/chromium/issues/detail?id=51146 Exploit, Issue Tracking, Patch, Vendor Advisory
- http://googlechromereleases.blogspot.com/2010/08/stable-channel-update_19.html Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11839 Third Party Advisory
- http://code.google.com/p/chromium/issues/detail?id=51146 Exploit, Issue Tracking, Patch, Vendor Advisory
- http://googlechromereleases.blogspot.com/2010/08/stable-channel-update_19.html Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11839 Third Party Advisory