CVE-2010-1230

EUVD-2010-1260
Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
Affected Products (NVD)
VendorProductVersion
googlechrome
𝑥
< 4.1.249.1036
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
dapper
dne
hardy
dne
intrepid
dne
jaunty
dne
karmic
dne
lucid
not-affected
Common Weakness Enumeration
References
http://code.google.com/p/chromium/issues/detail?id=30801
http://code.google.com/p/chromium/issues/detail?id=33445
http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14292
http://code.google.com/p/chromium/issues/detail?id=30801
http://code.google.com/p/chromium/issues/detail?id=33445
http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14292