Beveiligingsadvies

CVE-2010-0657

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2010-02-18 17:19:00
Laatst bijgewerkt 2024-08-07 00:59:38
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Google Chrome before 4.0.249.78 on Windows does not perform the expected encoding, escaping, and quoting for the URL in the --app argument in a desktop shortcut, which allows user-assisted remote attackers to execute arbitrary programs or obtain sensitive information by tricking a user into creating a crafted shortcut.