Vulnerability Details CVE-2010-0661
WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.016
EPSS Ranking 81.0%
CVSS Severity
CVSS v2 Score 6.8
Products affected by CVE-2010-0661
-
cpe:2.3:a:apple:webkit:52400
-
cpe:2.3:a:google:chrome:-
-
cpe:2.3:a:google:chrome:0.1.38.1
-
cpe:2.3:a:google:chrome:0.1.38.2
-
cpe:2.3:a:google:chrome:0.1.38.4
-
cpe:2.3:a:google:chrome:0.1.40.1
-
cpe:2.3:a:google:chrome:0.1.42.2
-
cpe:2.3:a:google:chrome:0.1.42.3
-
cpe:2.3:a:google:chrome:0.2.149.27
-
cpe:2.3:a:google:chrome:0.2.149.29
-
cpe:2.3:a:google:chrome:0.2.149.30
-
cpe:2.3:a:google:chrome:0.2.152.1
-
cpe:2.3:a:google:chrome:0.2.153.1
-
cpe:2.3:a:google:chrome:0.3.154.0
-
cpe:2.3:a:google:chrome:0.3.154.3
-
cpe:2.3:a:google:chrome:0.4.154.18
-
cpe:2.3:a:google:chrome:0.4.154.22
-
cpe:2.3:a:google:chrome:0.4.154.31
-
cpe:2.3:a:google:chrome:0.4.154.33
-
cpe:2.3:a:google:chrome:1.0.154.36
-
cpe:2.3:a:google:chrome:1.0.154.39
-
cpe:2.3:a:google:chrome:1.0.154.42
-
cpe:2.3:a:google:chrome:1.0.154.43
-
cpe:2.3:a:google:chrome:1.0.154.46
-
cpe:2.3:a:google:chrome:1.0.154.48
-
cpe:2.3:a:google:chrome:1.0.154.52
-
cpe:2.3:a:google:chrome:1.0.154.53
-
cpe:2.3:a:google:chrome:1.0.154.59
-
cpe:2.3:a:google:chrome:1.0.154.64
-
cpe:2.3:a:google:chrome:1.0.154.65
-
cpe:2.3:a:google:chrome:2.0.156.1
-
cpe:2.3:a:google:chrome:2.0.157.0
-
cpe:2.3:a:google:chrome:2.0.157.2
-
cpe:2.3:a:google:chrome:2.0.158.0
-
cpe:2.3:a:google:chrome:2.0.159.0
-
cpe:2.3:a:google:chrome:2.0.169.0
-
cpe:2.3:a:google:chrome:2.0.169.1
-
cpe:2.3:a:google:chrome:2.0.170.0
-
cpe:2.3:a:google:chrome:2.0.172
-
cpe:2.3:a:google:chrome:2.0.172.2
-
cpe:2.3:a:google:chrome:2.0.172.27
-
cpe:2.3:a:google:chrome:2.0.172.28
-
cpe:2.3:a:google:chrome:2.0.172.30
-
cpe:2.3:a:google:chrome:2.0.172.31
-
cpe:2.3:a:google:chrome:2.0.172.33
-
cpe:2.3:a:google:chrome:2.0.172.37
-
cpe:2.3:a:google:chrome:2.0.172.38
-
cpe:2.3:a:google:chrome:2.0.172.43
-
cpe:2.3:a:google:chrome:2.0.172.8
-
cpe:2.3:a:google:chrome:3.0
-
cpe:2.3:a:google:chrome:3.0.182.2
-
cpe:2.3:a:google:chrome:3.0.190.2
-
cpe:2.3:a:google:chrome:3.0.193.2
-
cpe:2.3:a:google:chrome:3.0.195.2
-
cpe:2.3:a:google:chrome:3.0.195.21
-
cpe:2.3:a:google:chrome:3.0.195.24
-
cpe:2.3:a:google:chrome:3.0.195.25
-
cpe:2.3:a:google:chrome:3.0.195.27
-
cpe:2.3:a:google:chrome:3.0.195.32
-
cpe:2.3:a:google:chrome:3.0.195.33
-
cpe:2.3:a:google:chrome:3.0.195.36
-
cpe:2.3:a:google:chrome:3.0.195.37
-
cpe:2.3:a:google:chrome:3.0.195.38
-
cpe:2.3:a:google:chrome:4.0.212.0
-
cpe:2.3:a:google:chrome:4.0.212.1
-
cpe:2.3:a:google:chrome:4.0.221.8
-
cpe:2.3:a:google:chrome:4.0.222.0
-
cpe:2.3:a:google:chrome:4.0.222.1
-
cpe:2.3:a:google:chrome:4.0.222.12
-
cpe:2.3:a:google:chrome:4.0.222.5
-
cpe:2.3:a:google:chrome:4.0.223.0
-
cpe:2.3:a:google:chrome:4.0.223.1
-
cpe:2.3:a:google:chrome:4.0.223.2
-
cpe:2.3:a:google:chrome:4.0.223.4
-
cpe:2.3:a:google:chrome:4.0.223.5
-
cpe:2.3:a:google:chrome:4.0.223.7
-
cpe:2.3:a:google:chrome:4.0.223.8
-
cpe:2.3:a:google:chrome:4.0.223.9
-
cpe:2.3:a:google:chrome:4.0.224.0
-
cpe:2.3:a:google:chrome:4.0.229.1
-
cpe:2.3:a:google:chrome:4.0.235.0
-
cpe:2.3:a:google:chrome:4.0.236.0
-
cpe:2.3:a:google:chrome:4.0.237.0
-
cpe:2.3:a:google:chrome:4.0.237.1
-
cpe:2.3:a:google:chrome:4.0.239.0
-
cpe:2.3:a:google:chrome:4.0.240.0
-
cpe:2.3:a:google:chrome:4.0.241.0
-
cpe:2.3:a:google:chrome:4.0.242.0
-
cpe:2.3:a:google:chrome:4.0.243.0
-
cpe:2.3:a:google:chrome:4.0.244.0
-
cpe:2.3:a:google:chrome:4.0.245.0
-
cpe:2.3:a:google:chrome:4.0.245.1
-
cpe:2.3:a:google:chrome:4.0.246.0
-
cpe:2.3:a:google:chrome:4.0.247.0
-
cpe:2.3:a:google:chrome:4.0.248.0
-
cpe:2.3:a:google:chrome:4.0.249.0