Google Chrome prior to 4.1.249.1059 Local File Reference Security Vulnerability

Bugtraq ID:	39806
Class:	Unknown
CVE:	CVE-2010-1502
Remote:	Yes
Local:	No
Published:	Apr 20 2010 12:00AM
Updated:	Apr 20 2010 12:00AM
Credit:	Robert Swiecki, Google Security Team; Tavis Ormandy, Google Security Team
Vulnerable:	Google Chrome 4.1.249 1036 Google Chrome 4.1.249 .1045 Google Chrome 4.1.249 .1042 Google Chrome 4.0.249 .89 Google Chrome 4.0.249 .78
Not Vulnerable:	Google Chrome 4.1.249 1059

Google Chrome prior to 4.1.249.1059 Local File Reference Security Vulnerability

Google Chrome is prone to an unspecified security vulnerability.

Very few details are available regarding this issue. We will update this BID as more information emerges.

Attackers may be able exploit this issue to obtain sensitive information; other attacks may be possible.

Versions prior to Chrome 4.1.249.1059 are vulnerable.

NOTE: This issue was previously covered in BID 39603 (Google Chrome prior to 4.1.249.1059 Multiple Security Vulnerabilities) but has been assigned its own record to better document it.

Google Chrome prior to 4.1.249.1059 Local File Reference Security Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Chrome prior to 4.1.249.1059 Local File Reference Security Vulnerability

Solution:
Updates are available; please see the references for details.

Google Chrome prior to 4.1.249.1059 Local File Reference Security Vulnerability

References:

• Google Chrome 4.1.249.1059 has been released to the Stable channel on Windows. (Google)
  
• Google Chrome Homepage (Google)