CVE-2009-0374 Other in n/a
Attackers can trick users into clicking unintended elements via clickjacking in Google Chrome, requiring user interaction to execute the malicious action.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2009-0374?
CVE-2009-0374 is a medium-severity vulnerability in Google Chrome, published on 30 Jan 2009. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Google Chrome 1.0.154.43 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Clickjacking" vulnerability. NOTE: a third party disputes the relevance of this issue, stating that "every sufficiently featured browser is and likely will remain susceptible to the behavior known as clickjacking," and adding that the exploit code "is not a valid demonstration of the issue.
Which versions are affected by CVE-2009-0374?
It affects 1 product.
Products include Google Chrome.
How do I fix CVE-2009-0374?
No fix has been published for CVE-2009-0374 yet. Limit exposure of the affected software until one is available.
Is CVE-2009-0374 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2009-0374 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Google Chrome
Sources
Also known as GHSA-6f4q-2mq8-qf27.