Description
translate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network.
Metrics
CVSS 2.0 5.0/10
AV:N/AC:L/Au:N/C:P/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://code.google.com/p/chromium/issues/detail?id=112236Broken Link
- http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.htmlRelease Notes, Vendor Advisory
- http://googlechromereleases.blogspot.com/2012/02/dev-channel-update_10.htmlRelease Notes, Vendor Advisory
- http://secunia.com/advisories/48016Not Applicable
- http://src.chromium.org/viewvc/chrome?view=rev&revision=120113Issue Tracking, Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15025Third Party Advisory
- http://code.google.com/p/chromium/issues/detail?id=112236Broken Link
- http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.htmlRelease Notes, Vendor Advisory
- http://googlechromereleases.blogspot.com/2012/02/dev-channel-update_10.htmlRelease Notes, Vendor Advisory
- http://secunia.com/advisories/48016Not Applicable
- http://src.chromium.org/viewvc/chrome?view=rev&revision=120113Issue Tracking, Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15025Third Party Advisory
Timeline
- Published
- Feb 16, 2012
- Last modified
- Jun 16, 2026
- NVD status
- Modified