CVE-2009-2071
15.06.2009, 19:30
Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.Enginsight
| Vendor | Product | Version |
|---|---|---|
| chrome | 𝑥 ≤ 1.0.154.52 | |
| chrome | 0.2.149.29 | |
| chrome | 0.2.149.30 | |
| chrome | 0.2.152.1 | |
| chrome | 0.2.153.1 | |
| chrome | 0.3.154.0 | |
| chrome | 0.3.154.3 | |
| chrome | 0.4.154.18 | |
| chrome | 0.4.154.22 | |
| chrome | 0.4.154.31 | |
| chrome | 0.4.154.33 | |
| chrome | 1.0.154.36 | |
| chrome | 1.0.154.39 | |
| chrome | 1.0.154.42 | |
| chrome | 1.0.154.43 | |
| chrome | 1.0.154.46 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References