CVE-2015-1229 in Chrome

Sumário (Inglês)

net/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 (aka Proxy Authentication Required) HTTP status code accompanied by a Set-Cookie header, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

21/01/2015

Divulgação

08/03/2015

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
73924	Google Chrome Proxy proxy_client_socket.cc	19	Não provado	Correção oficial	CVE-2015-1229

Fontes

• MITRE
• NVD
• CVE Details