CVE-2009-2071: Medium severity Google Chrome vulnerability
Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2071?
CVE-2009-2071 is considered critical due to its potential for man-in-the-middle attacks.
How do I fix CVE-2009-2071?
To fix CVE-2009-2071, upgrade Google Chrome to version 1.0.154.53 or later.
What versions of Google Chrome are affected by CVE-2009-2071?
CVE-2009-2071 affects Google Chrome versions prior to 1.0.154.53.
What type of attack does CVE-2009-2071 facilitate?
CVE-2009-2071 facilitates man-in-the-middle attacks due to cached certificates.
Is CVE-2009-2071 specific to any operating system?
CVE-2009-2071 is specific to the Google Chrome browser and affects all supported operating systems where it is installed.