CVEvulnerability
CVE-2010-3417
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-09-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, which allows attackers to obtain potentially sensitive information via unspecified vectors.
Affected configurations
• google chrome (< 6.0.472.59)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://code.google.com/p/chromium/issues/detail?id=54006 Patch, Vendor Advisory
- http://googlechromereleases.blogspot.com/2010/09/stable-beta-channel-updates_14.html Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7371 Third Party Advisory
- http://code.google.com/p/chromium/issues/detail?id=54006 Patch, Vendor Advisory
- http://googlechromereleases.blogspot.com/2010/09/stable-beta-channel-updates_14.html Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7371 Third Party Advisory