mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
122 lines
4.7 KiB
JSON
122 lines
4.7 KiB
JSON
{
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "cve@mitre.org",
|
|
"ID": "CVE-2009-3931",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "n/a",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "n/a"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Incomplete blacklist vulnerability in browser/download/download_exe.cc in Google Chrome before 3.0.195.32 allows remote attackers to force the download of certain dangerous files via a \"Content-Disposition: attachment\" designation, as demonstrated by (1) .mht and (2) .mhtml files, which are automatically executed by Internet Explorer 6; (3) .svg files, which are automatically executed by Safari; (4) .xml files; (5) .htt files; (6) .xsl files; (7) .xslt files; and (8) image files that are forbidden by the victim's site policy."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"name": "http://codereview.chromium.org/download/issue243115_2002.diff",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://codereview.chromium.org/download/issue243115_2002.diff"
|
|
},
|
|
{
|
|
"name": "http://code.google.com/p/chromium/issues/detail?id=23979",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://code.google.com/p/chromium/issues/detail?id=23979"
|
|
},
|
|
{
|
|
"name": "http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html"
|
|
},
|
|
{
|
|
"name": "http://codereview.chromium.org/243115",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://codereview.chromium.org/243115"
|
|
},
|
|
{
|
|
"name": "http://securethoughts.com/2009/11/using-blended-browser-threats-involving-chrome-to-steal-files-on-your-computer/",
|
|
"refsource": "MISC",
|
|
"url": "http://securethoughts.com/2009/11/using-blended-browser-threats-involving-chrome-to-steal-files-on-your-computer/"
|
|
},
|
|
{
|
|
"name": "59742",
|
|
"refsource": "OSVDB",
|
|
"url": "http://www.osvdb.org/59742"
|
|
},
|
|
{
|
|
"name": "http://codereview.chromium.org/261022",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://codereview.chromium.org/261022"
|
|
},
|
|
{
|
|
"name": "37273",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/37273"
|
|
},
|
|
{
|
|
"name": "http://codereview.chromium.org/download/issue261022_1.diff",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://codereview.chromium.org/download/issue261022_1.diff"
|
|
},
|
|
{
|
|
"name": "google-chrome-warning-weak-security(54171)",
|
|
"refsource": "XF",
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54171"
|
|
},
|
|
{
|
|
"name": "ADV-2009-3159",
|
|
"refsource": "VUPEN",
|
|
"url": "http://www.vupen.com/english/advisories/2009/3159"
|
|
},
|
|
{
|
|
"name": "36947",
|
|
"refsource": "BID",
|
|
"url": "http://www.securityfocus.com/bid/36947"
|
|
},
|
|
{
|
|
"name": "20091106 Using Blended Browser Threats involving Chrome to steal files on your computer",
|
|
"refsource": "BUGTRAQ",
|
|
"url": "http://www.securityfocus.com/archive/1/507713"
|
|
}
|
|
]
|
|
}
|
|
} |