Vulnerability in Google Chrome

CVE-2011-3022

translate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network.

EPSS: 0.008 (52.1th percentile) — read the EPSS interpretation.

Affected products

  • Google Chrome — versions 19.0.1028.0, 19.0.1029.0, 19.0.1030.0
  • N/a — versions n/a

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_CONFIRM, Patch, Issue Tracking, Vendor Advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Broken Link)
  • cve@mitre.org (x_refsource_CONFIRM, Release Notes, Vendor Advisory)
  • cve@mitre.org (x_refsource_SECUNIA, Not Applicable, third-party-advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Release Notes, Vendor Advisory)
  • cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)