Vulnetix
Try Vulnetix Request Demo
CVE-2009-2973 PUBLISHED CVSS 6.400000095367432 MEDIUM

Google Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509 certificate signed with the (1) MD2 or (2) MD4 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary HTTPS servers via a crafted certificate, a related issue to CVE-2009-2409.

EPSS 0.12% · 30.3th percentile

Risk Scores

CVSS v2.0
6.400000095367432
EPSS Score
0.12%
30.3th percentile

Affected Products

VendorProductVersions
googlechrome2.0.172.33, 0, 0.2.149.27
n/an/an/a

Timeline

References

Open in Interactive Console →