Vulnerability in Google Chrome
CVE-2008-7294
Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.8 (Medium). Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.010 (61.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 62nd percentile — 61.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.010 · newest: 0.010 · change: 0.000
Affected products
- Google Chrome — versions 0.1.38.1, 0.1.38.2, 0.1.38.4
Weakness classification (CWE)
References
- michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html
- code.google.com/p/browsersec/wiki/Part2
- scarybeastsecurity.blogspot.com/2011/02/some-less-obvious-benefits-of-hsts.html
- bugzilla.mozilla.org/show_bug.cgi (Patch)
- lists.w3.org/Archives/Public/public-webapps/2009JulSep/1148.html (mailing-list)
- scarybeastsecurity.blogspot.com/2008/11/cookie-forcing.html