CVE-2011-3022

high

Description

translate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15025

http://src.chromium.org/viewvc/chrome?view=rev&revision=120113

http://secunia.com/advisories/48016

http://googlechromereleases.blogspot.com/2012/02/dev-channel-update_10.html

http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html

Details

Source: Mitre, NVD

Published: 2012-02-16

Updated: 2025-04-11

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High

EPSS

EPSS: 0.00461

Detections

Analytics