CVE-2010-1230

Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2010-04-01

Last modified

2024-08-07

Weaknesses

CWE-200

Affected products

• Chrome (Google)

References

• http://code.google.com/p/chromium/issues/detail?id=30801
• http://code.google.com/p/chromium/issues/detail?id=33445
• http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14292