VulnerabilityModified

CVE-2011-3022

translate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network.

MEDIUM 5.0EPSS 0.78%

Does this matter?

Lower severity and a low EPSS score (0.78%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS: 0.78% probability · 54th percentile
CISA KEV: Not listed
Weakness: CWE-319
Affected: google/chrome
Source: cve@mitre.org

References

http://code.google.com/p/chromium/issues/detail?id=112236Broken Link
http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.htmlRelease Notes, Vendor Advisory
http://googlechromereleases.blogspot.com/2012/02/dev-channel-update_10.htmlRelease Notes, Vendor Advisory
http://secunia.com/advisories/48016Not Applicable
http://src.chromium.org/viewvc/chrome?view=rev&revision=120113Issue Tracking, Patch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15025Third Party Advisory
http://code.google.com/p/chromium/issues/detail?id=112236Broken Link
http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.htmlRelease Notes, Vendor Advisory
http://googlechromereleases.blogspot.com/2012/02/dev-channel-update_10.htmlRelease Notes, Vendor Advisory
http://secunia.com/advisories/48016Not Applicable
http://src.chromium.org/viewvc/chrome?view=rev&revision=120113Issue Tracking, Patch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15025Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.