CVE-2011-3061 in Chrome

Resumen (Inglés)

Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might allow man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2011-08-09

Divulgación

2012-03-30

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
5004	Google Chrome SPDY Proxy Certificate Checking escalada de privilegios	20	Prueba de concepto	Arreglo oficial	CVE-2011-3061

Fuentes

• MITRE
• NVD
• CVE Details