VDB
CVE-2009-0374
CVE-2009-0374
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Google Chrome 1.0.154.43 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Clickjacking" vulnerability. NOTE: a third party disputes the relevance of this issue, stating that "every sufficiently featured browser is and likely will remain susceptible to the behavior known as clickjacking," and adding that the exploit code "is not a valid demonstration of the issue.
EPSS 2.40% · 83.2th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
2.40%
83.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chrome | 1.0.154.43 | |
| n/a | n/a | n/a |
Timeline
- Jan 28, 2009 PoC Published
- Jan 30, 2009 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Sep 9, 2023 EPSS Score
References
- 7903 exploit
- 20090128 Re: Advisory: Google Chrome 1.0.154.43 ClickJacking Vulnerability. mailing-list
- http://www.secniche.org/gcr_clkj/ url
- 20090128 Advisory: Google Chrome 1.0.154.43 ClickJacking Vulnerability. mailing-list
- https://nvd.nist.gov/vuln/detail/CVE-2009-0374 advisory
- http://www.secniche.org/gcr_clkj url