CVEvulnerability
CVE-2011-3022
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-02-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-319
Description
translate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected configurations
• google chrome (< 17.0.963.56)
• google chrome (>= 19.0 < 19.0.1036.7)
• google chrome 19.0.1028.0
• google chrome 19.0.1029.0
• google chrome 19.0.1030.0
• google chrome 19.0.1031.0
• google chrome 19.0.1032.0
• google chrome 19.0.1033.0
• google chrome 19.0.1034.0
• google chrome 19.0.1035.0
• google chrome 19.0.1036.0
• google chrome 19.0.1036.2
• google chrome 19.0.1036.3
• google chrome 19.0.1036.4
• google chrome 19.0.1036.6
Related
Weakness · CWE (1)
- CWE-319 Cleartext Transmission of Sensitive Information weakness
References
- http://code.google.com/p/chromium/issues/detail?id=112236 Broken Link
- http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html Release Notes, Vendor Advisory
- http://googlechromereleases.blogspot.com/2012/02/dev-channel-update_10.html Release Notes, Vendor Advisory
- http://secunia.com/advisories/48016 Not Applicable
- http://src.chromium.org/viewvc/chrome?view=rev&revision=120113 Issue Tracking, Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15025 Third Party Advisory
- http://code.google.com/p/chromium/issues/detail?id=112236 Broken Link
- http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html Release Notes, Vendor Advisory
- http://googlechromereleases.blogspot.com/2012/02/dev-channel-update_10.html Release Notes, Vendor Advisory
- http://secunia.com/advisories/48016 Not Applicable
- http://src.chromium.org/viewvc/chrome?view=rev&revision=120113 Issue Tracking, Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15025 Third Party Advisory