Vulnerability Details CVE-2010-0657
Google Chrome before 4.0.249.78 on Windows does not perform the expected encoding, escaping, and quoting for the URL in the --app argument in a desktop shortcut, which allows user-assisted remote attackers to execute arbitrary programs or obtain sensitive information by tricking a user into creating a crafted shortcut.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 78.9%
CVSS Severity
CVSS v2 Score 9.3
Products affected by CVE-2010-0657
-
cpe:2.3:a:google:chrome:0.2.149.27
-
cpe:2.3:a:google:chrome:0.2.149.29
-
cpe:2.3:a:google:chrome:0.2.149.30
-
cpe:2.3:a:google:chrome:0.2.152.1
-
cpe:2.3:a:google:chrome:0.2.153.1
-
cpe:2.3:a:google:chrome:0.3.154.0
-
cpe:2.3:a:google:chrome:0.3.154.3
-
cpe:2.3:a:google:chrome:0.4.154.18
-
cpe:2.3:a:google:chrome:0.4.154.22
-
cpe:2.3:a:google:chrome:0.4.154.31
-
cpe:2.3:a:google:chrome:0.4.154.33
-
cpe:2.3:a:google:chrome:1.0.154.36
-
cpe:2.3:a:google:chrome:1.0.154.39
-
cpe:2.3:a:google:chrome:1.0.154.42
-
cpe:2.3:a:google:chrome:1.0.154.43
-
cpe:2.3:a:google:chrome:1.0.154.46
-
cpe:2.3:a:google:chrome:1.0.154.48
-
cpe:2.3:a:google:chrome:1.0.154.52
-
cpe:2.3:a:google:chrome:1.0.154.53
-
cpe:2.3:a:google:chrome:1.0.154.59
-
cpe:2.3:a:google:chrome:1.0.154.65
-
cpe:2.3:a:google:chrome:2.0.156.1
-
cpe:2.3:a:google:chrome:2.0.157.0
-
cpe:2.3:a:google:chrome:2.0.157.2
-
cpe:2.3:a:google:chrome:2.0.158.0
-
cpe:2.3:a:google:chrome:2.0.159.0
-
cpe:2.3:a:google:chrome:2.0.169.0
-
cpe:2.3:a:google:chrome:2.0.169.1
-
cpe:2.3:a:google:chrome:2.0.170.0
-
cpe:2.3:a:google:chrome:2.0.172
-
cpe:2.3:a:google:chrome:2.0.172.2
-
cpe:2.3:a:google:chrome:2.0.172.27
-
cpe:2.3:a:google:chrome:2.0.172.28
-
cpe:2.3:a:google:chrome:2.0.172.30
-
cpe:2.3:a:google:chrome:2.0.172.31
-
cpe:2.3:a:google:chrome:2.0.172.33
-
cpe:2.3:a:google:chrome:2.0.172.37
-
cpe:2.3:a:google:chrome:2.0.172.38
-
cpe:2.3:a:google:chrome:2.0.172.8
-
cpe:2.3:a:google:chrome:3.0.182.2
-
cpe:2.3:a:google:chrome:3.0.190.2
-
cpe:2.3:a:google:chrome:3.0.193.2
-
cpe:2.3:a:google:chrome:3.0.195.21
-
cpe:2.3:a:google:chrome:3.0.195.24
-
cpe:2.3:a:google:chrome:3.0.195.32
-
cpe:2.3:a:google:chrome:3.0.195.33
-
cpe:2.3:a:google:chrome:4.0.249.78
-
cpe:2.3:o:microsoft:windows:-
-
cpe:2.3:o:microsoft:windows:1.0
-
cpe:2.3:o:microsoft:windows:2.0
-
cpe:2.3:o:microsoft:windows:2000
-
cpe:2.3:o:microsoft:windows:3.0
-
cpe:2.3:o:microsoft:windows:3.1
-
cpe:2.3:o:microsoft:windows:3.11
-
cpe:2.3:o:microsoft:windows:server_2008
-
cpe:2.3:o:microsoft:windows:vista