Description (CNA)
translate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://src.chromium.org/viewvc/chrome?view=rev&revision=120113
- http://code.google.com/p/chromium/issues/detail?id=112236
- http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html
- http://secunia.com/advisories/48016
- http://googlechromereleases.blogspot.com/2012/02/dev-channel-update_10.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15025
ADP enrichment
No English description supplied.
- http://src.chromium.org/viewvc/chrome?view=rev&revision=120113
- http://code.google.com/p/chromium/issues/detail?id=112236
- http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html
- http://secunia.com/advisories/48016
- http://googlechromereleases.blogspot.com/2012/02/dev-channel-update_10.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15025