Description
browser/login/login_prompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication, as demonstrated by a URL in the SRC attribute of an IMG element.
References
- 38177 vdb-entry
- 62319 vdb-entry
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
- 1023583 vdb-entry
- ADV-2010-0361 vdb-entry
- http://code.google.com/p/chromium/issues/detail?id=32718
- oval:org.mitre.oval:def:14407 vdb-entry signature
- http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html
- http://www.vsecurity.com/advisory/20100215-1.txt
- googlechrome-dialogs-phishing(56216) vdb-entry
- 38545 third-party-advisory
- 20100216 Chrome Password Manager Cross Origin Weakness (CVE-2010-0556) mailing-list