CVE-2010-3115

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote attackers to spoof the address bar via unspecified vectors.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://code.google.com/p/chromium/issues/detail?id=49964Exploit, Patch, Vendor Advisory
http://googlechromereleases.blogspot.com/2010/08/stable-channel-update_19.htmlVendor Advisory
http://secunia.com/advisories/41856Third Party Advisory
http://secunia.com/advisories/43086Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2011-0177.htmlThird Party Advisory
http://www.securityfocus.com/bid/44203Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-1006-1Third Party Advisory
http://www.vupen.com/english/advisories/2010/2722Third Party Advisory
http://www.vupen.com/english/advisories/2011/0216Third Party Advisory
http://www.vupen.com/english/advisories/2011/0552Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11953Third Party Advisory
http://code.google.com/p/chromium/issues/detail?id=49964Exploit, Patch, Vendor Advisory
http://googlechromereleases.blogspot.com/2010/08/stable-channel-update_19.htmlVendor Advisory
http://secunia.com/advisories/41856Third Party Advisory
http://secunia.com/advisories/43086Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2011-0177.htmlThird Party Advisory
http://www.securityfocus.com/bid/44203Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-1006-1Third Party Advisory
http://www.vupen.com/english/advisories/2010/2722Third Party Advisory
http://www.vupen.com/english/advisories/2011/0216Third Party Advisory
http://www.vupen.com/english/advisories/2011/0552Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11953Third Party Advisory

Timeline

Published: Aug 24, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-311610.0Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375 CVE-2010-311710.0Google Chrome before 5.0.375.127 does not properly implement the notifications feature, which allows remote attackers to cause a denial of s CVE-2010-31185.0The autosuggest feature in the Omnibox implementation in Google Chrome before 5.0.375.127 does not anticipate entry of passwords, which migh CVE-2010-311910.0Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a den CVE-2010-312010.0Google Chrome before 5.0.375.127 does not properly implement the Geolocation feature, which allows remote attackers to cause a denial of ser CVE-2010-31217.5Buffer overflow in tm-console-bin in the DevonIT thin-client management tool might allow remote attackers to execute arbitrary code via unsp CVE-2010-31225.0The DevonIT thin-client management tool relies on a shared secret for authentication but transmits the secret in cleartext, which makes it e CVE-2010-31249.3Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers,CVE-2010-31259.3Untrusted search path vulnerability in TeamMate Audit Management Software Suite 8.0 patch 2 allows local users, and possibly remote attacker CVE-2010-31269.3Untrusted search path vulnerability in avast! Free Antivirus version 5.0.594 and earlier allows local users, and possibly remote attackers, CVE-2010-31279.3Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitra CVE-2010-31289.3Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitra