Google Chrome prior to 4.1.249.1059 HTTP Request Unspecified Security Vulnerability

Bugtraq ID:	39809
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Apr 20 2010 12:00AM
Updated:	Apr 20 2010 12:00AM
Credit:	Meder Kydyraliev from Google Security Team
Vulnerable:	Google Chrome 4.1.249 1036 Google Chrome 4.1.249 .1045 Google Chrome 4.1.249 .1042 Google Chrome 4.0.249 .89 Google Chrome 4.0.249 .78
Not Vulnerable:	Google Chrome 4.1.249 1059

Google Chrome prior to 4.1.249.1059 HTTP Request Unspecified Security Vulnerability

Google Chrome is prone to an unspecified security vulnerability.

Attackers can exploit this issue carry out cross-site request-forgery attacks.

Very few details are currently available. We will update this BID when more information emerges.

Versions prior to Chrome 4.1.249.1059 are vulnerable.

Note: This issue was previously described in BID 39603 (Google Chrome prior to 4.1.249.1059 Multiple Security Vulnerabilities) but has been given its own record to better document it.

Google Chrome prior to 4.1.249.1059 HTTP Request Unspecified Security Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Chrome prior to 4.1.249.1059 HTTP Request Unspecified Security Vulnerability

Solution:
Vendor updates are available. Please see the references for details.

Google Chrome prior to 4.1.249.1059 HTTP Request Unspecified Security Vulnerability

References:

• Google Chrome 4.1.249.1059 has been released to the Stable channel on Windows. (Google)
  
• Google Chrome Homepage (Google)