Google Chrome Cross Site Scripting and Cross Domain Security Bypass Vulnerabilities
BID:33529
Info
Google Chrome Cross Site Scripting and Cross Domain Security Bypass Vulnerabilities
| Bugtraq ID: | 33529 |
| Class: | Unknown |
| CVE: |
CVE-2009-0276 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 28 2009 12:00AM |
| Updated: | Feb 11 2009 09:08PM |
| Credit: | Michael Schmidt and Google |
| Vulnerable: |
Google Chrome 1.0.154.36 |
| Not Vulnerable: |
Google Chrome 1.0.154.46 |
Discussion
Google Chrome Cross Site Scripting and Cross Domain Security Bypass Vulnerabilities
Google Chrome is prone to multiple cross-site scripting vulnerabilities and a cross-domain security-bypass vulnerability.
An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the browser of an unsuspecting user in the context of an arbitrary site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
The cross-domain security-bypass vulnerability will allow the attacker to bypass the same-origin policy and obtain potentially sensitive information.
These issues affect versions prior to Google Chrome 1.0.154.46.
Google Chrome is prone to multiple cross-site scripting vulnerabilities and a cross-domain security-bypass vulnerability.
An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the browser of an unsuspecting user in the context of an arbitrary site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
The cross-domain security-bypass vulnerability will allow the attacker to bypass the same-origin policy and obtain potentially sensitive information.
These issues affect versions prior to Google Chrome 1.0.154.46.
Exploit / POC
Google Chrome Cross Site Scripting and Cross Domain Security Bypass Vulnerabilities
An attacker can exploit these issues using standard tools. For a cross-site scripting attack, the attacker must entice a user to open a malicious URI.
An attacker can exploit these issues using standard tools. For a cross-site scripting attack, the attacker must entice a user to open a malicious URI.
Solution / Fix
Google Chrome Cross Site Scripting and Cross Domain Security Bypass Vulnerabilities
Solution:
The vendor has released updates. Please see the references for more information.
NOTE: The vendor has addressed the cross-site scripting issues by blocking the vulnerable functionality. Reportedly, the vendor is working with Adobe on a full fix for these issues.
Solution:
The vendor has released updates. Please see the references for more information.
NOTE: The vendor has addressed the cross-site scripting issues by blocking the vulnerable functionality. Reportedly, the vendor is working with Adobe on a full fix for these issues.
References
Google Chrome Cross Site Scripting and Cross Domain Security Bypass Vulnerabilities
References:
References:
- Google Chrome Homepage (Google)
- Stable, Beta update: Yahoo! Mail and Security Fixes (Google)