CVE-2009-0374: Medium severity Google Chrome vulnerability
DISPUTED Google Chrome 1.0.154.43 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Clickjacking" vulnerability. NOTE: a third party disputes the relevance of this issue, stating that "every sufficiently featured browser is and likely will remain susceptible to the behavior known as clickjacking," and adding that the exploit code "is not a valid demonstration of the issue."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0374?
CVE-2009-0374 is classified as a moderate severity vulnerability due to the potential for clickjacking attacks.
How do I fix CVE-2009-0374?
To fix CVE-2009-0374, upgrade to a later version of Google Chrome that does not contain the vulnerability.
What software versions are affected by CVE-2009-0374?
CVE-2009-0374 specifically affects Google Chrome version 1.0.154.43.
What type of vulnerability is CVE-2009-0374?
CVE-2009-0374 is a clickjacking vulnerability that allows remote attackers to manipulate user interactions.
Can CVE-2009-0374 be exploited remotely?
Yes, CVE-2009-0374 can be exploited remotely if a user is tricked into clicking on a crafted element.