CVE编号
CVE-2011-3046利用情况
暂无补丁情况
官方补丁披露时间
2012-03-09漏洞描述
Google Chrome是一款开源的WEB浏览器。UXSS和不良历史记录导航存在安全问题，允许攻击者构建恶意WEB页，诱使用户访问，以应用程序上下文执行任意代码。解决建议
Google Chrome 17.0.963.78已经修复此漏洞，建议用户下载使用：http://googlechromereleases.blogspot.com/2012/03/chrome-stable-channel-update.html
参考链接 |
|
|---|---|
| http://code.google.com/p/chromium/issues/detail?id=117226 | |
| http://code.google.com/p/chromium/issues/detail?id=117230 | |
| http://googlechromereleases.blogspot.com/2012/03/chrome-stable-channel-update.html | |
| http://lists.apple.com/archives/security-announce/2012/May/msg00000.html | |
| http://lists.apple.com/archives/security-announce/2012/May/msg00002.html | |
| http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00012.html | |
| http://secunia.com/advisories/47292 | |
| http://secunia.com/advisories/48321 | |
| http://secunia.com/advisories/48419 | |
| http://secunia.com/advisories/48527 | |
| http://security.gentoo.org/glsa/glsa-201203-19.xml | |
| http://support.apple.com/kb/HT5282 | |
| http://www.securityfocus.com/bid/52369 | |
| http://www.securitytracker.com/id?1026776 | |
| http://www.zdnet.com/blog/security/cansecwest-pwnium-google-chrome-hacked-wit... | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova... | |
| https://plus.google.com/u/0/116651741222993143554/posts/5Eq5d9XgFqs |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 应用 | apple | safari | * |
Up to (excluding) 5.1.7 |
|||||
| 运行在以下环境 | |||||||||
| 应用 | chrome | * |
Up to (excluding) 17.0.963.78 |
||||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_12.1 | chromium | * |
Up to (excluding) 19.0.1066.0-1.11.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_12.1 | chromium-debuginfo | * |
Up to (excluding) 19.0.1066.0-1.11.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_12.1 | chromium-suid-helper | * |
Up to (excluding) 19.0.1066.0-1.11.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_12.1 | chromium-suid-helper-debuginfo | * |
Up to (excluding) 19.0.1066.0-1.11.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_12.1 | v8-debugsource | * |
Up to (excluding) 19.0.1066.0-1.11.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_12.1 | v8-devel | * |
Up to (excluding) 19.0.1066.0-1.11.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_12.1 | v8-private-headers-devel | * |
Up to (excluding) 19.0.1066.0-1.11.2 |
|||||
- 攻击路径 本地
- 攻击复杂度 困难
- 权限要求 普通权限
- 影响范围 有限影响
- EXP成熟度 未验证
- 补丁情况 官方补丁
- 数据保密性 无影响
- 数据完整性 无影响
- 服务器危害 无影响
- 全网数量 -
还没有评论，来说两句吧...