CVE-2010-0660
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2010-0660
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Google Chrome敏感信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Google Chrome是Google发布的一款浏览器。 Google Chrome存在敏感信息泄露漏洞。在https 到 http重定向中的某个环境中，Google Chrome可能发送http请求的Referer报头中https URL信息，远程http服务器可以借助标准HTTP日志，获取敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2010-0660
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-0660
请登录查看更多情报信息。
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14247vdb-entrysignaturex_refsource_OVAL
- https://nvd.nist.gov/vuln/detail/CVE-2010-0660
Same Patch Batch · n/a · 2010-02-18 · 25 CVEs total
| CVE-2010-0653 | Opera download样式表敏感信息泄露漏洞 | |
| CVE-2010-0556 | Google Chrome样式表重新定向信息泄露漏洞 | |
| CVE-2010-0664 | Google Chrome程序函数ChildProcessSecurityPolicy::CanRequestURL栈消耗漏洞 | |
| CVE-2010-0663 | Google Chrome程序内存敏感信息泄露漏洞 | |
| CVE-2010-0662 | Google Chrome程序 拒绝服务攻击漏洞 | |
| CVE-2010-0661 | Apple WebKit 'WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp'安全绕过漏洞 | |
| CVE-2010-0659 | Apple WebKit Chrome沙盒任意代码执行漏洞 | |
| CVE-2010-0658 | Google Skia多个整数溢出漏洞 | |
| CVE-2010-0657 | Google Chrome桌面快捷方式代码执行和敏感信息泄露漏洞 | |
| CVE-2010-0656 | Apple WebKit XMLHttpRequest请求响应信息泄露漏洞 | |
| CVE-2010-0655 | Google Chrome popup窗口 拒绝服务和任意代码执行漏洞 | |
| CVE-2010-0654 | Mozilla Firefox/Thunderbird/SeaMonkey download样式表敏感信息泄露漏洞 | |
| CVE-2010-0416 | Realnetworks Helix Player和RealPlayer Unescape多个缓冲区溢出漏洞 | |
| CVE-2010-0652 | Microsoft Internet Explorer download样式表敏感信息泄露漏洞 | |
| CVE-2010-0651 | Apple WebKit download样式表敏感信息泄露漏洞 | |
| CVE-2010-0650 | Google Chrome和Apple Safari WebKit popup窗口安全漏洞 | |
| CVE-2010-0649 | Google Chrome 'CrossCallParamsEx::CreateFromBuffer'整数溢出漏洞 | |
| CVE-2010-0648 | Mozilla Firefox 目标URLdocument.styleSheets[0].href特性信息泄露漏洞 | |
| CVE-2010-0647 | WebKit 代码注入漏洞 | |
| CVE-2010-0646 | Google Chrome Google V8 'factory.cc'整数错误漏洞 |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2010-0660
No comments yet