VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML
CVE-2010-2110
chrome: Google Chrome before 5.0.375.55 does not properly e...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-2110

Original

Google Chrome before 5.0.375.55 does not properly execute JavaScript code in the extension context, which has unspecified impact and remote attack vectors.

Translation   (Show)





About This Analysis Information
Analysis Information Provider:
NIST NVD
First Published:
2010-05-28
Source Information Category:
Advisory, Alert
Last Updated:
2010-05-31




Affected Product Tags
cpe:/a:google:chrome:0.2.149.27
cpe:/a:google:chrome:0.2.149.29
cpe:/a:google:chrome:0.2.149.30
cpe:/a:google:chrome:0.2.152.1
cpe:/a:google:chrome:0.2.153.1
cpe:/a:google:chrome:0.3.154.0
cpe:/a:google:chrome:0.3.154.3
cpe:/a:google:chrome:0.4.154.18
cpe:/a:google:chrome:0.4.154.22
cpe:/a:google:chrome:0.4.154.31
cpe:/a:google:chrome:0.4.154.33
cpe:/a:google:chrome:1.0.154.36
cpe:/a:google:chrome:1.0.154.39
cpe:/a:google:chrome:1.0.154.42
cpe:/a:google:chrome:1.0.154.43
cpe:/a:google:chrome:1.0.154.46
cpe:/a:google:chrome:1.0.154.48
cpe:/a:google:chrome:1.0.154.52
cpe:/a:google:chrome:1.0.154.53
cpe:/a:google:chrome:1.0.154.59
cpe:/a:google:chrome:1.0.154.64
cpe:/a:google:chrome:1.0.154.65
cpe:/a:google:chrome:2.0.156.1
cpe:/a:google:chrome:2.0.157.0
cpe:/a:google:chrome:2.0.157.2
cpe:/a:google:chrome:2.0.158.0
cpe:/a:google:chrome:2.0.159.0
cpe:/a:google:chrome:2.0.169.0
cpe:/a:google:chrome:2.0.169.1
cpe:/a:google:chrome:2.0.170.0
cpe:/a:google:chrome:2.0.172
cpe:/a:google:chrome:2.0.172.2
cpe:/a:google:chrome:2.0.172.27
cpe:/a:google:chrome:2.0.172.28
cpe:/a:google:chrome:2.0.172.30
cpe:/a:google:chrome:2.0.172.31
cpe:/a:google:chrome:2.0.172.33
cpe:/a:google:chrome:2.0.172.37
cpe:/a:google:chrome:2.0.172.38
cpe:/a:google:chrome:2.0.172.8
cpe:/a:google:chrome:3.0.182.2
cpe:/a:google:chrome:3.0.190.2
cpe:/a:google:chrome:3.0.193.2:beta
cpe:/a:google:chrome:3.0.195.2
cpe:/a:google:chrome:3.0.195.21
cpe:/a:google:chrome:3.0.195.24
cpe:/a:google:chrome:3.0.195.25
cpe:/a:google:chrome:3.0.195.27
cpe:/a:google:chrome:3.0.195.32
cpe:/a:google:chrome:3.0.195.33
cpe:/a:google:chrome:3.0.195.36
cpe:/a:google:chrome:3.0.195.37
cpe:/a:google:chrome:3.0.195.38
cpe:/a:google:chrome:4.1.249.0
cpe:/a:google:chrome:4.1.249.1001
cpe:/a:google:chrome:4.1.249.1004
cpe:/a:google:chrome:4.1.249.1006
cpe:/a:google:chrome:4.1.249.1007
cpe:/a:google:chrome:4.1.249.1008
cpe:/a:google:chrome:4.1.249.1009
cpe:/a:google:chrome:4.1.249.1010
cpe:/a:google:chrome:4.1.249.1011
cpe:/a:google:chrome:4.1.249.1012
cpe:/a:google:chrome:4.1.249.1013
cpe:/a:google:chrome:4.1.249.1014
cpe:/a:google:chrome:4.1.249.1015
cpe:/a:google:chrome:4.1.249.1016
cpe:/a:google:chrome:4.1.249.1017
cpe:/a:google:chrome:4.1.249.1018
cpe:/a:google:chrome:4.1.249.1019
cpe:/a:google:chrome:4.1.249.1020
cpe:/a:google:chrome:4.1.249.1021
cpe:/a:google:chrome:4.1.249.1022
cpe:/a:google:chrome:4.1.249.1023
cpe:/a:google:chrome:4.1.249.1024
cpe:/a:google:chrome:4.1.249.1025
cpe:/a:google:chrome:4.1.249.1026
cpe:/a:google:chrome:4.1.249.1027
cpe:/a:google:chrome:4.1.249.1028
cpe:/a:google:chrome:4.1.249.1029
cpe:/a:google:chrome:4.1.249.1030
cpe:/a:google:chrome:4.1.249.1031
cpe:/a:google:chrome:4.1.249.1032
cpe:/a:google:chrome:4.1.249.1033
cpe:/a:google:chrome:4.1.249.1034
cpe:/a:google:chrome:4.1.249.1035
cpe:/a:google:chrome:4.1.249.1036
cpe:/a:google:chrome:4.1.249.1042
cpe:/a:google:chrome:4.1.249.1045
cpe:/a:google:chrome:4.1.249.1046
cpe:/a:google:chrome:4.1.249.1047
cpe:/a:google:chrome:4.1.249.1048
cpe:/a:google:chrome:4.1.249.1049
cpe:/a:google:chrome:4.1.249.1050
cpe:/a:google:chrome:4.1.249.1051
cpe:/a:google:chrome:4.1.249.1052
cpe:/a:google:chrome:4.1.249.1053
cpe:/a:google:chrome:4.1.249.1054
cpe:/a:google:chrome:4.1.249.1055
cpe:/a:google:chrome:4.1.249.1056
cpe:/a:google:chrome:4.1.249.1057
cpe:/a:google:chrome:4.1.249.1058
cpe:/a:google:chrome:4.1.249.1059
cpe:/a:google:chrome:4.1.249.1060
cpe:/a:google:chrome:4.1.249.1061
cpe:/a:google:chrome:4.1.249.1062
cpe:/a:google:chrome:4.1.249.1063 and previous versions
cpe:/a:google:chrome:4.1:beta
cpe:/a:google:chrome:5.0.306.0
cpe:/a:google:chrome:5.0.306.1
cpe:/a:google:chrome:5.0.307.1
cpe:/a:google:chrome:5.0.307.10
cpe:/a:google:chrome:5.0.307.11
cpe:/a:google:chrome:5.0.307.3
cpe:/a:google:chrome:5.0.307.4
cpe:/a:google:chrome:5.0.307.5
cpe:/a:google:chrome:5.0.307.6
cpe:/a:google:chrome:5.0.307.7
cpe:/a:google:chrome:5.0.307.8
cpe:/a:google:chrome:5.0.307.9
cpe:/a:google:chrome:5.0.308.0
cpe:/a:google:chrome:5.0.309.0
cpe:/a:google:chrome:5.0.313.0
cpe:/a:google:chrome:5.0.314.0
cpe:/a:google:chrome:5.0.314.1
cpe:/a:google:chrome:5.0.315.0
cpe:/a:google:chrome:5.0.316.0
cpe:/a:google:chrome:5.0.317.0
cpe:/a:google:chrome:5.0.317.1
cpe:/a:google:chrome:5.0.317.2
cpe:/a:google:chrome:5.0.318.0
cpe:/a:google:chrome:5.0.319.0
cpe:/a:google:chrome:5.0.320.0
cpe:/a:google:chrome:5.0.321.0
cpe:/a:google:chrome:5.0.322.0
cpe:/a:google:chrome:5.0.322.1
cpe:/a:google:chrome:5.0.322.2
cpe:/a:google:chrome:5.0.323.0
cpe:/a:google:chrome:5.0.324.0
cpe:/a:google:chrome:5.0.325.0
cpe:/a:google:chrome:5.0.326.0
cpe:/a:google:chrome:5.0.327.0
cpe:/a:google:chrome:5.0.328.0
cpe:/a:google:chrome:5.0.329.0
cpe:/a:google:chrome:5.0.330.0
cpe:/a:google:chrome:5.0.332.0
cpe:/a:google:chrome:5.0.333.0
cpe:/a:google:chrome:5.0.334.0
cpe:/a:google:chrome:5.0.335.0
cpe:/a:google:chrome:5.0.335.1
cpe:/a:google:chrome:5.0.335.2
cpe:/a:google:chrome:5.0.335.3
cpe:/a:google:chrome:5.0.335.4
cpe:/a:google:chrome:5.0.336.0
cpe:/a:google:chrome:5.0.337.0
cpe:/a:google:chrome:5.0.338.0
cpe:/a:google:chrome:5.0.339.0
cpe:/a:google:chrome:5.0.340.0
cpe:/a:google:chrome:5.0.341.0
cpe:/a:google:chrome:5.0.342.0
cpe:/a:google:chrome:5.0.342.1
cpe:/a:google:chrome:5.0.342.2
cpe:/a:google:chrome:5.0.342.3
cpe:/a:google:chrome:5.0.342.4
cpe:/a:google:chrome:5.0.342.5
cpe:/a:google:chrome:5.0.342.6
cpe:/a:google:chrome:5.0.342.7
cpe:/a:google:chrome:5.0.342.7:beta:mac
cpe:/a:google:chrome:5.0.342.8
cpe:/a:google:chrome:5.0.342.8:beta:windows
cpe:/a:google:chrome:5.0.342.9
cpe:/a:google:chrome:5.0.343.0
cpe:/a:google:chrome:5.0.344.0
cpe:/a:google:chrome:5.0.345.0
cpe:/a:google:chrome:5.0.346.0
cpe:/a:google:chrome:5.0.347.0
cpe:/a:google:chrome:5.0.348.0
cpe:/a:google:chrome:5.0.349.0
cpe:/a:google:chrome:5.0.350.0
cpe:/a:google:chrome:5.0.350.1
cpe:/a:google:chrome:5.0.351.0
cpe:/a:google:chrome:5.0.353.0
cpe:/a:google:chrome:5.0.354.0
cpe:/a:google:chrome:5.0.354.1
cpe:/a:google:chrome:5.0.355.0
cpe:/a:google:chrome:5.0.356.0
cpe:/a:google:chrome:5.0.356.1
cpe:/a:google:chrome:5.0.356.2
cpe:/a:google:chrome:5.0.357.0
cpe:/a:google:chrome:5.0.358.0
cpe:/a:google:chrome:5.0.359.0
cpe:/a:google:chrome:5.0.360.0
cpe:/a:google:chrome:5.0.360.3
cpe:/a:google:chrome:5.0.360.4
cpe:/a:google:chrome:5.0.360.5
cpe:/a:google:chrome:5.0.361.0
cpe:/a:google:chrome:5.0.362.0
cpe:/a:google:chrome:5.0.363.0
cpe:/a:google:chrome:5.0.364.0
cpe:/a:google:chrome:5.0.365.0
cpe:/a:google:chrome:5.0.366.0
cpe:/a:google:chrome:5.0.366.1
cpe:/a:google:chrome:5.0.366.2
cpe:/a:google:chrome:5.0.366.3
cpe:/a:google:chrome:5.0.366.4
cpe:/a:google:chrome:5.0.367.0
cpe:/a:google:chrome:5.0.368.0
cpe:/a:google:chrome:5.0.369.0
cpe:/a:google:chrome:5.0.369.1
cpe:/a:google:chrome:5.0.369.2
cpe:/a:google:chrome:5.0.370.0
cpe:/a:google:chrome:5.0.371.0
cpe:/a:google:chrome:5.0.372.0
cpe:/a:google:chrome:5.0.373.0
cpe:/a:google:chrome:5.0.374.0
cpe:/a:google:chrome:5.0.375.0
cpe:/a:google:chrome:5.0.375.1
cpe:/a:google:chrome:5.0.375.10
cpe:/a:google:chrome:5.0.375.11
cpe:/a:google:chrome:5.0.375.12
cpe:/a:google:chrome:5.0.375.13
cpe:/a:google:chrome:5.0.375.14
cpe:/a:google:chrome:5.0.375.15
cpe:/a:google:chrome:5.0.375.16
cpe:/a:google:chrome:5.0.375.17
cpe:/a:google:chrome:5.0.375.18
cpe:/a:google:chrome:5.0.375.19
cpe:/a:google:chrome:5.0.375.2
cpe:/a:google:chrome:5.0.375.20
cpe:/a:google:chrome:5.0.375.21
cpe:/a:google:chrome:5.0.375.22
cpe:/a:google:chrome:5.0.375.23
cpe:/a:google:chrome:5.0.375.25
cpe:/a:google:chrome:5.0.375.26
cpe:/a:google:chrome:5.0.375.27
cpe:/a:google:chrome:5.0.375.28
cpe:/a:google:chrome:5.0.375.29
cpe:/a:google:chrome:5.0.375.3
cpe:/a:google:chrome:5.0.375.30
cpe:/a:google:chrome:5.0.375.31
cpe:/a:google:chrome:5.0.375.32
cpe:/a:google:chrome:5.0.375.33
cpe:/a:google:chrome:5.0.375.34
cpe:/a:google:chrome:5.0.375.35
cpe:/a:google:chrome:5.0.375.36
cpe:/a:google:chrome:5.0.375.37
cpe:/a:google:chrome:5.0.375.38
cpe:/a:google:chrome:5.0.375.4
cpe:/a:google:chrome:5.0.375.5
 


Vulnerability Analysis Results
[Access Vector]  [?]
Undefined [?]

Local [?]
Adjacent Network [?]
X Network [?]

[Access Complexit]  [?]
Undefined [?]

High [?]
Medium [?]
X Low [?]

[Authentication]  [?]
Undefined [?]

Multiple [?]
Single [?]
X None [?]

[Confidentiality Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]

[Integrity Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]

[Availability Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]

Alternatives




References
CONFIRM http://googlechromereleases.blogspot.com/2010/05/stable-channel-update.html




CONFIRM http://code.google.com/p/chromium/issues/detail?id=42228




Vulnerability Type Design Error (NVD-CWE-DesignError)





Copyright © 2010 JPCERT/CC All Rights Reserved.