VulnerabilityModified
CVE-2010-4033
Google Chrome before 7.0.517.41 does not properly implement the autofill and autocomplete functionality, which allows remote attackers to conduct "profile spamming" attacks via unspecified vectors.
MEDIUM 5.0EPSS 1.21%
Does this matter?
Lower severity and a low EPSS score (1.21%). Track it; it rarely justifies an emergency change on its own.
Description
Google Chrome before 7.0.517.41 does not properly implement the autofill and autocomplete functionality, which allows remote attackers to conduct "profile spamming" attacks via unspecified vectors.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 1.21% probability · 67th percentile
- CISA KEV
- Not listed
- Affected
- google/chrome
- Source
- cve@mitre.org
References
- http://code.google.com/p/chromium/issues/detail?id=48225
- http://code.google.com/p/chromium/issues/detail?id=51727
- http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html
- http://secunia.com/advisories/41888Vendor Advisory
- http://www.securityfocus.com/bid/44241
- http://www.vupen.com/english/advisories/2010/2731Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7159
- http://code.google.com/p/chromium/issues/detail?id=48225
- http://code.google.com/p/chromium/issues/detail?id=51727
- http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html
- http://secunia.com/advisories/41888Vendor Advisory
- http://www.securityfocus.com/bid/44241
- http://www.vupen.com/english/advisories/2010/2731Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7159
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.