VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC ] 



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML ] 
CVE-2010-4035
chrome: Google Chrome before 7.0.517.41 does not properly p...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4035

Original

Google Chrome before 7.0.517.41 does not properly perform autofill operations for forms, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.

Translation   (Show)





About This Analysis Information
Analysis Information Provider:
NIST NVD
First Published:
2010-10-21
Source Information Category:
Advisory, Alert
Last Updated:
2010-10-22




Affected Product Tags
cpe:/a:google:chrome:6.0.454.0
cpe:/a:google:chrome:6.0.455.0
cpe:/a:google:chrome:6.0.456.0
cpe:/a:google:chrome:6.0.457.0
cpe:/a:google:chrome:6.0.458.0
cpe:/a:google:chrome:6.0.458.1
cpe:/a:google:chrome:6.0.458.2
cpe:/a:google:chrome:6.0.459.0
cpe:/a:google:chrome:6.0.460.0
cpe:/a:google:chrome:6.0.461.0
cpe:/a:google:chrome:6.0.462.0
cpe:/a:google:chrome:6.0.464.1
cpe:/a:google:chrome:6.0.465.1
cpe:/a:google:chrome:6.0.465.2
cpe:/a:google:chrome:6.0.466.0
cpe:/a:google:chrome:6.0.466.1
cpe:/a:google:chrome:6.0.466.2
cpe:/a:google:chrome:6.0.466.3
cpe:/a:google:chrome:6.0.466.4
cpe:/a:google:chrome:6.0.466.5
cpe:/a:google:chrome:6.0.466.6
cpe:/a:google:chrome:6.0.467.0
cpe:/a:google:chrome:6.0.469.0
cpe:/a:google:chrome:6.0.470.0
cpe:/a:google:chrome:6.0.471.0
cpe:/a:google:chrome:6.0.472.0
cpe:/a:google:chrome:6.0.472.1
cpe:/a:google:chrome:6.0.472.10
cpe:/a:google:chrome:6.0.472.11
cpe:/a:google:chrome:6.0.472.12
cpe:/a:google:chrome:6.0.472.13
cpe:/a:google:chrome:6.0.472.14
cpe:/a:google:chrome:6.0.472.15
cpe:/a:google:chrome:6.0.472.16
cpe:/a:google:chrome:6.0.472.17
cpe:/a:google:chrome:6.0.472.18
cpe:/a:google:chrome:6.0.472.19
cpe:/a:google:chrome:6.0.472.2
cpe:/a:google:chrome:6.0.472.20
cpe:/a:google:chrome:6.0.472.21
cpe:/a:google:chrome:6.0.472.22
cpe:/a:google:chrome:6.0.472.23
cpe:/a:google:chrome:6.0.472.24
cpe:/a:google:chrome:6.0.472.25
cpe:/a:google:chrome:6.0.472.26
cpe:/a:google:chrome:6.0.472.27
cpe:/a:google:chrome:6.0.472.28
cpe:/a:google:chrome:6.0.472.29
cpe:/a:google:chrome:6.0.472.3
cpe:/a:google:chrome:6.0.472.30
cpe:/a:google:chrome:6.0.472.31
cpe:/a:google:chrome:6.0.472.32
cpe:/a:google:chrome:6.0.472.33
cpe:/a:google:chrome:6.0.472.34
cpe:/a:google:chrome:6.0.472.35
cpe:/a:google:chrome:6.0.472.36
cpe:/a:google:chrome:6.0.472.37
cpe:/a:google:chrome:6.0.472.38
cpe:/a:google:chrome:6.0.472.39
cpe:/a:google:chrome:6.0.472.4
cpe:/a:google:chrome:6.0.472.40
cpe:/a:google:chrome:6.0.472.41
cpe:/a:google:chrome:6.0.472.42
cpe:/a:google:chrome:6.0.472.43
cpe:/a:google:chrome:6.0.472.44
cpe:/a:google:chrome:6.0.472.45
cpe:/a:google:chrome:6.0.472.46
cpe:/a:google:chrome:6.0.472.47
cpe:/a:google:chrome:6.0.472.48
cpe:/a:google:chrome:6.0.472.49
cpe:/a:google:chrome:6.0.472.5
cpe:/a:google:chrome:6.0.472.50
cpe:/a:google:chrome:6.0.472.51
cpe:/a:google:chrome:6.0.472.52
cpe:/a:google:chrome:6.0.472.53
cpe:/a:google:chrome:6.0.472.54
cpe:/a:google:chrome:6.0.472.55
cpe:/a:google:chrome:6.0.472.56
cpe:/a:google:chrome:6.0.472.57
cpe:/a:google:chrome:6.0.472.58
cpe:/a:google:chrome:6.0.472.59
cpe:/a:google:chrome:6.0.472.6
cpe:/a:google:chrome:6.0.472.60
cpe:/a:google:chrome:6.0.472.61
cpe:/a:google:chrome:6.0.472.62
cpe:/a:google:chrome:6.0.472.63
cpe:/a:google:chrome:6.0.472.7
cpe:/a:google:chrome:6.0.472.8
cpe:/a:google:chrome:6.0.472.9
cpe:/a:google:chrome:6.0.473.0
cpe:/a:google:chrome:6.0.474.0
cpe:/a:google:chrome:6.0.475.0
cpe:/a:google:chrome:6.0.476.0
cpe:/a:google:chrome:6.0.477.0
cpe:/a:google:chrome:6.0.478.0
cpe:/a:google:chrome:6.0.479.0
cpe:/a:google:chrome:6.0.480.0
cpe:/a:google:chrome:6.0.481.0
cpe:/a:google:chrome:6.0.482.0
cpe:/a:google:chrome:6.0.483.0
cpe:/a:google:chrome:6.0.484.0
cpe:/a:google:chrome:6.0.485.0
cpe:/a:google:chrome:6.0.486.0
cpe:/a:google:chrome:6.0.487.0
cpe:/a:google:chrome:6.0.488.0
cpe:/a:google:chrome:6.0.489.0
cpe:/a:google:chrome:6.0.490.0
cpe:/a:google:chrome:6.0.490.1
cpe:/a:google:chrome:6.0.491.0
cpe:/a:google:chrome:6.0.492.0
cpe:/a:google:chrome:6.0.493.0
cpe:/a:google:chrome:6.0.494.0
cpe:/a:google:chrome:6.0.495.0
cpe:/a:google:chrome:6.0.495.1
cpe:/a:google:chrome:6.0.496.0
cpe:/a:google:chrome:7.0.497.0
cpe:/a:google:chrome:7.0.498.0
cpe:/a:google:chrome:7.0.499.0
cpe:/a:google:chrome:7.0.499.1
cpe:/a:google:chrome:7.0.500.0
cpe:/a:google:chrome:7.0.500.1
cpe:/a:google:chrome:7.0.503.0
cpe:/a:google:chrome:7.0.503.1
cpe:/a:google:chrome:7.0.504.0
cpe:/a:google:chrome:7.0.505.0
cpe:/a:google:chrome:7.0.506.0
cpe:/a:google:chrome:7.0.507.0
cpe:/a:google:chrome:7.0.507.1
cpe:/a:google:chrome:7.0.507.2
cpe:/a:google:chrome:7.0.507.3
cpe:/a:google:chrome:7.0.509.0
cpe:/a:google:chrome:7.0.510.0
cpe:/a:google:chrome:7.0.511.1
cpe:/a:google:chrome:7.0.511.2
cpe:/a:google:chrome:7.0.511.4
cpe:/a:google:chrome:7.0.512.0
cpe:/a:google:chrome:7.0.513.0
cpe:/a:google:chrome:7.0.514.0
cpe:/a:google:chrome:7.0.514.1
cpe:/a:google:chrome:7.0.515.0
cpe:/a:google:chrome:7.0.516.0
cpe:/a:google:chrome:7.0.517.0
cpe:/a:google:chrome:7.0.517.10
cpe:/a:google:chrome:7.0.517.11
cpe:/a:google:chrome:7.0.517.12
cpe:/a:google:chrome:7.0.517.13
cpe:/a:google:chrome:7.0.517.14
cpe:/a:google:chrome:7.0.517.16
cpe:/a:google:chrome:7.0.517.17
cpe:/a:google:chrome:7.0.517.18
cpe:/a:google:chrome:7.0.517.19
cpe:/a:google:chrome:7.0.517.2
cpe:/a:google:chrome:7.0.517.20
cpe:/a:google:chrome:7.0.517.21
cpe:/a:google:chrome:7.0.517.22
cpe:/a:google:chrome:7.0.517.23
cpe:/a:google:chrome:7.0.517.24
cpe:/a:google:chrome:7.0.517.25
cpe:/a:google:chrome:7.0.517.26
cpe:/a:google:chrome:7.0.517.27
cpe:/a:google:chrome:7.0.517.28
cpe:/a:google:chrome:7.0.517.29
cpe:/a:google:chrome:7.0.517.30
cpe:/a:google:chrome:7.0.517.31
cpe:/a:google:chrome:7.0.517.32
cpe:/a:google:chrome:7.0.517.33
cpe:/a:google:chrome:7.0.517.34
cpe:/a:google:chrome:7.0.517.35
cpe:/a:google:chrome:7.0.517.36
cpe:/a:google:chrome:7.0.517.37
cpe:/a:google:chrome:7.0.517.38
cpe:/a:google:chrome:7.0.517.39
cpe:/a:google:chrome:7.0.517.4
cpe:/a:google:chrome:7.0.517.40 and previous versions
cpe:/a:google:chrome:7.0.517.5
cpe:/a:google:chrome:7.0.517.6
cpe:/a:google:chrome:7.0.517.7
cpe:/a:google:chrome:7.0.517.8
cpe:/a:google:chrome:7.0.517.9
 


Vulnerability Analysis Results
[Access Vector]  [?]
Undefined [?]

Local [?]
Adjacent Network [?]
X Network [?]
[Access Complexit]  [?]
Undefined [?]

High [?]
X Medium [?]
Low [?]
[Authentication]  [?]
Undefined [?]

Multiple [?]
Single [?]
X None [?]
[Confidentiality Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]
[Integrity Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]
[Availability Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]
Alternatives




References
BID 44241




CONFIRM http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html




CONFIRM http://code.google.com/p/chromium/issues/detail?id=50428




SECUNIA 41888




VUPEN ADV-2010-2731




Vulnerability Type Input Validation (CWE-20)




Copyright © 2010 JPCERT/CC All Rights Reserved.