NVD Vulnerability Detail

CVE-2010-1231

Summary	Google Chrome before 4.1.249.1036 processes HTTP headers before invoking the SafeBrowsing feature, which allows remote attackers to have an unspecified impact via crafted headers.
Publication Date	April 2, 2010, 7:30 a.m.
Registration Date	Jan. 29, 2021, 10:59 a.m.
Last Update	Sept. 19, 2017, 10:30 a.m.

CVSS2.0 : HIGH
Score	7.5
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:google:chrome:0.2.149.27:::::::*
cpe:2.3:a:google:chrome:0.2.149.29:::::::*
cpe:2.3:a:google:chrome:0.2.149.30:::::::*
cpe:2.3:a:google:chrome:0.2.152.1:::::::*
cpe:2.3:a:google:chrome:0.2.153.1:::::::*
cpe:2.3:a:google:chrome:0.3.154.0:::::::*
cpe:2.3:a:google:chrome:0.3.154.3:::::::*
cpe:2.3:a:google:chrome:0.4.154.18:::::::*
cpe:2.3:a:google:chrome:0.4.154.22:::::::*
cpe:2.3:a:google:chrome:0.4.154.31:::::::*
cpe:2.3:a:google:chrome:0.4.154.33:::::::*
cpe:2.3:a:google:chrome:1.0.154.36:::::::*
cpe:2.3:a:google:chrome:1.0.154.39:::::::*
cpe:2.3:a:google:chrome:1.0.154.42:::::::*
cpe:2.3:a:google:chrome:1.0.154.43:::::::*
cpe:2.3:a:google:chrome:1.0.154.46:::::::*
cpe:2.3:a:google:chrome:1.0.154.48:::::::*
cpe:2.3:a:google:chrome:1.0.154.52:::::::*
cpe:2.3:a:google:chrome:1.0.154.53:::::::*
cpe:2.3:a:google:chrome:1.0.154.59:::::::*
cpe:2.3:a:google:chrome:1.0.154.65:::::::*
cpe:2.3:a:google:chrome:2.0.156.1:::::::*
cpe:2.3:a:google:chrome:2.0.157.0:::::::*
cpe:2.3:a:google:chrome:2.0.157.2:::::::*
cpe:2.3:a:google:chrome:2.0.158.0:::::::*
cpe:2.3:a:google:chrome:2.0.159.0:::::::*
cpe:2.3:a:google:chrome:2.0.169.0:::::::*
cpe:2.3:a:google:chrome:2.0.169.1:::::::*
cpe:2.3:a:google:chrome:2.0.170.0:::::::*
cpe:2.3:a:google:chrome:2.0.172:::::::*
cpe:2.3:a:google:chrome:2.0.172.2:::::::*
cpe:2.3:a:google:chrome:2.0.172.8:::::::*
cpe:2.3:a:google:chrome:2.0.172.27:::::::*
cpe:2.3:a:google:chrome:2.0.172.28:::::::*
cpe:2.3:a:google:chrome:2.0.172.30:::::::*
cpe:2.3:a:google:chrome:2.0.172.31:::::::*
cpe:2.3:a:google:chrome:2.0.172.33:::::::*
cpe:2.3:a:google:chrome:2.0.172.37:::::::*
cpe:2.3:a:google:chrome:2.0.172.38:::::::*
cpe:2.3:a:google:chrome:3.0.182.2:::::::*
cpe:2.3:a:google:chrome:3.0.190.2:::::::*
cpe:2.3:a:google:chrome:3.0.193.2:beta::::::
cpe:2.3:a:google:chrome:3.0.195.21:::::::*
cpe:2.3:a:google:chrome:3.0.195.24:::::::*
cpe:2.3:a:google:chrome:3.0.195.32:::::::*
cpe:2.3:a:google:chrome:3.0.195.33:::::::*
cpe:2.3:a:google:chrome:4.0.244.0:::::::*
cpe:2.3:a:google:chrome:4.0.249.0:::::::*
cpe:2.3:a:google:chrome:4.0.249.78:::::::*
cpe:2.3:a:google:chrome:4.0.249.78:beta::::::
cpe:2.3:a:google:chrome:4.0.249.89:::::::*
cpe:2.3:a:google:chrome:4.1:beta::::::
cpe:2.3:a:google:chrome:4.1.249.0:::::::*
cpe:2.3:a:google:chrome:4.1.249.1001:::::::*
cpe:2.3:a:google:chrome:4.1.249.1004:::::::*
cpe:2.3:a:google:chrome:4.1.249.1006:::::::*
cpe:2.3:a:google:chrome:4.1.249.1007:::::::*
cpe:2.3:a:google:chrome:4.1.249.1008:::::::*
cpe:2.3:a:google:chrome:4.1.249.1009:::::::*
cpe:2.3:a:google:chrome:4.1.249.1010:::::::*
cpe:2.3:a:google:chrome:4.1.249.1011:::::::*
cpe:2.3:a:google:chrome:4.1.249.1012:::::::*
cpe:2.3:a:google:chrome:4.1.249.1013:::::::*
cpe:2.3:a:google:chrome:4.1.249.1014:::::::*
cpe:2.3:a:google:chrome:4.1.249.1015:::::::*
cpe:2.3:a:google:chrome:4.1.249.1016:::::::*
cpe:2.3:a:google:chrome:4.1.249.1017:::::::*
cpe:2.3:a:google:chrome:4.1.249.1018:::::::*
cpe:2.3:a:google:chrome:4.1.249.1019:::::::*
cpe:2.3:a:google:chrome:4.1.249.1020:::::::*
cpe:2.3:a:google:chrome:4.1.249.1021:::::::*
cpe:2.3:a:google:chrome:4.1.249.1022:::::::*
cpe:2.3:a:google:chrome:4.1.249.1023:::::::*
cpe:2.3:a:google:chrome:4.1.249.1024:::::::*
cpe:2.3:a:google:chrome:4.1.249.1025:::::::*
cpe:2.3:a:google:chrome:4.1.249.1026:::::::*
cpe:2.3:a:google:chrome:4.1.249.1027:::::::*
cpe:2.3:a:google:chrome:4.1.249.1028:::::::*
cpe:2.3:a:google:chrome:4.1.249.1029:::::::*
cpe:2.3:a:google:chrome:4.1.249.1030:::::::*
cpe:2.3:a:google:chrome:4.1.249.1031:::::::*
cpe:2.3:a:google:chrome:4.1.249.1032:::::::*
cpe:2.3:a:google:chrome:4.1.249.1033:::::::*
cpe:2.3:a:google:chrome:4.1.249.1034:::::::*
cpe:2.3:a:google:chrome::::::::		4.1.249.1035

Related information, measures and tools

No	URL	refsource
1	http://code.google.com/p/chromium/issues/detail?id=33572	CONFIRM
2	http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html	CONFIRM
3	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14332	OVAL

Common Vulnerabilities List

JVN Vulnerability Information

Google Chrome の HTTP ヘッダ処理における脆弱性

Title	Google Chrome の HTTP ヘッダ処理における脆弱性
Summary	Google Chrome は、SafeBrowsing 機能を呼び出す前に HTTP ヘッダの処理を行うことにより、詳細不明な脆弱性が存在します。
Possible impacts	この脆弱性による影響の詳細は不明です。
Solution	ベンダ情報及び参考情報を参照して適切な対策を実施してください。
Publication Date	March 17, 2010, midnight
Registration Date	Nov. 24, 2010, 3:03 p.m.
Last Update	Nov. 24, 2010, 3:03 p.m.

Affected System

Google

Google Chrome 4.1.249.1036 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-1231	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1231
National Vulnerability Database (NVD)
2	CVE-2010-1231	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1231

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-DesignError	https://www.ipa.go.jp/security/vuln/CWE.html#CWEDesignError

ベンダー情報

No	Name	URL
Google
1	Google Chrome	http://www.google.com/chrome/intl/ja/landing.html?hl=ja
2	stable-channel-update	http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html

Change Log

No	Changed Details	Date of change
0	[2010年11月24日] 掲載	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:google:chrome:0.2.149.27:::::::*
cpe:2.3:a:google:chrome:0.2.149.29:::::::*
cpe:2.3:a:google:chrome:0.2.149.30:::::::*
cpe:2.3:a:google:chrome:0.2.152.1:::::::*
cpe:2.3:a:google:chrome:0.2.153.1:::::::*
cpe:2.3:a:google:chrome:0.3.154.0:::::::*
cpe:2.3:a:google:chrome:0.3.154.3:::::::*
cpe:2.3:a:google:chrome:0.4.154.18:::::::*
cpe:2.3:a:google:chrome:0.4.154.22:::::::*
cpe:2.3:a:google:chrome:0.4.154.31:::::::*
cpe:2.3:a:google:chrome:0.4.154.33:::::::*
cpe:2.3:a:google:chrome:1.0.154.36:::::::*
cpe:2.3:a:google:chrome:1.0.154.39:::::::*
cpe:2.3:a:google:chrome:1.0.154.42:::::::*
cpe:2.3:a:google:chrome:1.0.154.43:::::::*
cpe:2.3:a:google:chrome:1.0.154.46:::::::*
cpe:2.3:a:google:chrome:1.0.154.48:::::::*
cpe:2.3:a:google:chrome:1.0.154.52:::::::*
cpe:2.3:a:google:chrome:1.0.154.53:::::::*
cpe:2.3:a:google:chrome:1.0.154.59:::::::*
cpe:2.3:a:google:chrome:1.0.154.65:::::::*
cpe:2.3:a:google:chrome:2.0.156.1:::::::*
cpe:2.3:a:google:chrome:2.0.157.0:::::::*
cpe:2.3:a:google:chrome:2.0.157.2:::::::*
cpe:2.3:a:google:chrome:2.0.158.0:::::::*
cpe:2.3:a:google:chrome:2.0.159.0:::::::*
cpe:2.3:a:google:chrome:2.0.169.0:::::::*
cpe:2.3:a:google:chrome:2.0.169.1:::::::*
cpe:2.3:a:google:chrome:2.0.170.0:::::::*
cpe:2.3:a:google:chrome:2.0.172:::::::*
cpe:2.3:a:google:chrome:2.0.172.2:::::::*
cpe:2.3:a:google:chrome:2.0.172.8:::::::*
cpe:2.3:a:google:chrome:2.0.172.27:::::::*
cpe:2.3:a:google:chrome:2.0.172.28:::::::*
cpe:2.3:a:google:chrome:2.0.172.30:::::::*
cpe:2.3:a:google:chrome:2.0.172.31:::::::*
cpe:2.3:a:google:chrome:2.0.172.33:::::::*
cpe:2.3:a:google:chrome:2.0.172.37:::::::*
cpe:2.3:a:google:chrome:2.0.172.38:::::::*
cpe:2.3:a:google:chrome:3.0.182.2:::::::*
cpe:2.3:a:google:chrome:3.0.190.2:::::::*
cpe:2.3:a:google:chrome:3.0.193.2:beta::::::
cpe:2.3:a:google:chrome:3.0.195.21:::::::*
cpe:2.3:a:google:chrome:3.0.195.24:::::::*
cpe:2.3:a:google:chrome:3.0.195.32:::::::*
cpe:2.3:a:google:chrome:3.0.195.33:::::::*
cpe:2.3:a:google:chrome:4.0.244.0:::::::*
cpe:2.3:a:google:chrome:4.0.249.0:::::::*
cpe:2.3:a:google:chrome:4.0.249.78:::::::*
cpe:2.3:a:google:chrome:4.0.249.78:beta::::::
cpe:2.3:a:google:chrome:4.0.249.89:::::::*
cpe:2.3:a:google:chrome:4.1:beta::::::
cpe:2.3:a:google:chrome:4.1.249.0:::::::*
cpe:2.3:a:google:chrome:4.1.249.1001:::::::*
cpe:2.3:a:google:chrome:4.1.249.1004:::::::*
cpe:2.3:a:google:chrome:4.1.249.1006:::::::*
cpe:2.3:a:google:chrome:4.1.249.1007:::::::*
cpe:2.3:a:google:chrome:4.1.249.1008:::::::*
cpe:2.3:a:google:chrome:4.1.249.1009:::::::*
cpe:2.3:a:google:chrome:4.1.249.1010:::::::*
cpe:2.3:a:google:chrome:4.1.249.1011:::::::*
cpe:2.3:a:google:chrome:4.1.249.1012:::::::*
cpe:2.3:a:google:chrome:4.1.249.1013:::::::*
cpe:2.3:a:google:chrome:4.1.249.1014:::::::*
cpe:2.3:a:google:chrome:4.1.249.1015:::::::*
cpe:2.3:a:google:chrome:4.1.249.1016:::::::*
cpe:2.3:a:google:chrome:4.1.249.1017:::::::*
cpe:2.3:a:google:chrome:4.1.249.1018:::::::*
cpe:2.3:a:google:chrome:4.1.249.1019:::::::*
cpe:2.3:a:google:chrome:4.1.249.1020:::::::*
cpe:2.3:a:google:chrome:4.1.249.1021:::::::*
cpe:2.3:a:google:chrome:4.1.249.1022:::::::*
cpe:2.3:a:google:chrome:4.1.249.1023:::::::*
cpe:2.3:a:google:chrome:4.1.249.1024:::::::*
cpe:2.3:a:google:chrome:4.1.249.1025:::::::*
cpe:2.3:a:google:chrome:4.1.249.1026:::::::*
cpe:2.3:a:google:chrome:4.1.249.1027:::::::*
cpe:2.3:a:google:chrome:4.1.249.1028:::::::*
cpe:2.3:a:google:chrome:4.1.249.1029:::::::*
cpe:2.3:a:google:chrome:4.1.249.1030:::::::*
cpe:2.3:a:google:chrome:4.1.249.1031:::::::*
cpe:2.3:a:google:chrome:4.1.249.1032:::::::*
cpe:2.3:a:google:chrome:4.1.249.1033:::::::*
cpe:2.3:a:google:chrome:4.1.249.1034:::::::*
cpe:2.3:a:google:chrome::::::::		4.1.249.1035