CVE-2010-1231: High severity Google Chrome vulnerability
Published Apr 1, 2010
·Updated
Google Chrome before 4.1.249.1036 processes HTTP headers before invoking the SafeBrowsing feature, which allows remote attackers to have an unspecified impact via crafted headers.
Affected Software
85 affected components
Google Chrome=4.1.249.1017
Google Chrome=2.0.172.8
Google Chrome=0.3.154.3
Google Chrome=3.0.182.2
Google Chrome=4.1.249.1001
Google Chrome=4.1.249.1011
Google Chrome=4.1.249.1022
Google Chrome=0.2.149.30
Google Chrome=4.1.249.1027
Google Chrome=0.4.154.31
Google Chrome=1.0.154.39
Google Chrome=2.0.172.38
Google Chrome=1.0.154.59
Google Chrome=4.1.249.1008
Google Chrome=0.2.149.27
Google Chrome=1.0.154.53
Google Chrome=0.4.154.33
Google Chrome=2.0.170.0
Google Chrome=4.1.249.1019
Google Chrome=1.0.154.43
Google Chrome=4.1.249.1012
Google Chrome=4.1.249.1006
Google Chrome=1.0.154.42
Google Chrome=2.0.169.1
Google Chrome=4.1.249.1014
Google Chrome=2.0.172.33
Google Chrome=4.1.249.1028
Google Chrome=3.0.195.24
Google Chrome=4.1.249.1007
Google Chrome=4.1-beta
Google Chrome=3.0.195.33
Google Chrome=4.1.249.1009
Google Chrome=4.1.249.1018
Google Chrome=1.0.154.52
Google Chrome=2.0.172.27
Google Chrome=4.1.249.1034
Google Chrome=1.0.154.65
Google Chrome=4.1.249.0
Google Chrome=4.1.249.1029
Google Chrome=2.0.157.2
Google Chrome<=4.1.249.1035
Google Chrome=0.4.154.18
Google Chrome=0.2.149.29
Google Chrome=2.0.157.0
Google Chrome=4.1.249.1025
Google Chrome=4.1.249.1010
Google Chrome=0.2.152.1
Google Chrome=0.3.154.0
Google Chrome=4.1.249.1026
Google Chrome=4.1.249.1024
Google Chrome=0.2.153.1
Google Chrome=4.1.249.1031
Google Chrome=2.0.172.2
Google Chrome=3.0.195.21
Google Chrome=4.1.249.1032
Google Chrome=4.1.249.1004
Google Chrome=4.0.249.78
Google Chrome=2.0.169.0
Google Chrome=1.0.154.36
Google Chrome=2.0.172
Google Chrome=2.0.172.30
Google Chrome=3.0.193.2-beta
Google Chrome=2.0.156.1
Google Chrome=4.0.244.0
Google Chrome=4.0.249.0
Google Chrome=4.1.249.1033
Google Chrome=3.0.195.32
Google Chrome=4.1.249.1030
Google Chrome=4.1.249.1016
Google Chrome=1.0.154.46
Google Chrome=3.0.190.2
Google Chrome=0.4.154.22
Google Chrome=4.0.249.89
Google Chrome=4.1.249.1023
Google Chrome=2.0.159.0
Google Chrome=2.0.158.0
Google Chrome=2.0.172.28
Google Chrome=2.0.172.31
Google Chrome=1.0.154.48
Google Chrome=4.0.249.78-beta
Google Chrome=4.1.249.1020
Google Chrome=2.0.172.37
Google Chrome=4.1.249.1015
Google Chrome=4.1.249.1013
Google Chrome=4.1.249.1021
Event History
Apr 1, 2010
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:30 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1231?
The CVE-2010-1231 vulnerability has a medium severity rating as it allows remote attackers to manipulate HTTP header processing.
2
How do I fix CVE-2010-1231?
To fix CVE-2010-1231, update Google Chrome to version 4.1.249.1036 or later.
3
Which versions of Google Chrome are affected by CVE-2010-1231?
CVE-2010-1231 affects Google Chrome versions up to 4.1.249.1035 and earlier.
4
What impact does CVE-2010-1231 have on users?
CVE-2010-1231 can potentially lead to unauthorized actions as crafted HTTP headers can be processed before SafeBrowsing is invoked.
5
Is there a workaround for CVE-2010-1231?
There is no specific workaround for CVE-2010-1231; updating to a secure version is recommended.