Google Chrome 4.0.249.60
Approved changes feed: RSS · Atom
cpe:2.3:a:google:chrome:4.0.249.60:*:*:*:*:*:*:*
part: a version: 4.0.249.60 update: *
| Vendor | Google (f181d1eb-7269-5bae-b76e-e66ceb214562) |
|---|---|
| Product | Chrome (7761a6b4-a4d4-5c42-a32a-f1a892237802) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-5073 |
vulnerable | 2026-06-08 04:56:31.944602 |
Details available
The JavaScript implementation in Google Chrome 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method. NOTE: this may overlap CVE-2010-5070.
Published: 2011-12-07T19:00:00.000Z
Updated: 2024-08-07T04:09:39.163Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5069 |
vulnerable | 2026-06-08 04:56:31.785963 |
Details available
The Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264.
Published: 2011-12-07T19:00:00.000Z
Updated: 2024-08-07T04:09:38.651Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1851 |
vulnerable | 2026-06-08 04:54:10.726900 |
Details available
Google Chrome, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site data leakage" issue.
Published: 2010-05-07T17:43:00.000Z
Updated: 2024-08-07T01:35:53.636Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1236 |
vulnerable | 2026-06-08 04:54:06.796810 |
Details available
The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and Flock Browser 3.x before 3.0.0.4112, does not properly handle whitespace at the beginning of a URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted javascript: URL, as demonstrated by a \x00javascript:alert sequence.
Published: 2010-04-01T22:00:00.000Z
Updated: 2024-08-07T01:14:06.681Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1234 |
vulnerable | 2026-06-08 04:54:06.738512 |
Details available
Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to truncate the URL shown in the HTTP Basic Authentication dialog via unknown vectors.
Published: 2010-04-01T22:00:00.000Z
Updated: 2024-08-07T01:14:06.679Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.