GCVE-110-CERTCC-2016-305096

Advisory PublishedCVSS 6.8/10

Vulnetix · Advisory published February 4, 2016

Comodo Chromodo browser, version 45.8.12.391, and possibly earlier, bundles the Ad Sanitizer extension, version 1.4.0.26, which disables the same origin policy, allowing for the possibility of cross-domain attacks by malicious or compromised web hosts. Chromodo is based on an outdated release of Chromium with known vulnerabilities.

Download JSON Open in Console

Risk Scores

CVSS 2.0

6.8/10

Medium · AV:N/AC:M/Au:N/C:P/I:P/A:P

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact4d1_population1d1_direct_report0

certcc-cvss-temporal-env

temporal_score6.5remediation_levelUreport_confidenceCenvironmental_score1.62030477452813target_distributionLenvironmental_vectorCDP:ND/TD:L/CR:ND/IR:ND/AR:ND