CVE-2010-1663 - 漏洞详情

CVE-2010-1663 (CNNVD-201005-014)

CRITICAL 有利用代码

中文标题:

Google Chrome 'Google URL'解析库未明漏洞

英文标题:

The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before 4.1.249.1064 allows ...

CVSS分数: 10.0

发布时间: 2010-04-30 17:00:00

漏洞类型: 授权问题

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v4

漏洞描述

中文描述:

Google Chrome是Google发布的开源WEB浏览器。 Google Chrome的Google URL 解析库 (即google-url或GURL)存在漏洞，远程攻击者利用攻击向量可以绕过同源策略。

英文描述:

The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before 4.1.249.1064 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

CWE类型:

CWE-264

受影响产品

厂商	产品	版本	版本范围	平台	CPE
google	chrome	*	-	-	`cpe:2.3:a:google:chrome::::::::`
google	chrome	0.2.149.27	-	-	`cpe:2.3:a:google:chrome:0.2.149.27:::::::*`
google	chrome	0.2.149.29	-	-	`cpe:2.3:a:google:chrome:0.2.149.29:::::::*`
google	chrome	0.2.149.30	-	-	`cpe:2.3:a:google:chrome:0.2.149.30:::::::*`
google	chrome	0.2.152.1	-	-	`cpe:2.3:a:google:chrome:0.2.152.1:::::::*`
google	chrome	0.2.153.1	-	-	`cpe:2.3:a:google:chrome:0.2.153.1:::::::*`
google	chrome	0.3.154.0	-	-	`cpe:2.3:a:google:chrome:0.3.154.0:::::::*`
google	chrome	0.3.154.3	-	-	`cpe:2.3:a:google:chrome:0.3.154.3:::::::*`
google	chrome	0.4.154.18	-	-	`cpe:2.3:a:google:chrome:0.4.154.18:::::::*`
google	chrome	0.4.154.22	-	-	`cpe:2.3:a:google:chrome:0.4.154.22:::::::*`
google	chrome	0.4.154.31	-	-	`cpe:2.3:a:google:chrome:0.4.154.31:::::::*`
google	chrome	0.4.154.33	-	-	`cpe:2.3:a:google:chrome:0.4.154.33:::::::*`
google	chrome	1.0.154.36	-	-	`cpe:2.3:a:google:chrome:1.0.154.36:::::::*`
google	chrome	1.0.154.39	-	-	`cpe:2.3:a:google:chrome:1.0.154.39:::::::*`
google	chrome	1.0.154.42	-	-	`cpe:2.3:a:google:chrome:1.0.154.42:::::::*`
google	chrome	1.0.154.43	-	-	`cpe:2.3:a:google:chrome:1.0.154.43:::::::*`
google	chrome	1.0.154.46	-	-	`cpe:2.3:a:google:chrome:1.0.154.46:::::::*`
google	chrome	1.0.154.48	-	-	`cpe:2.3:a:google:chrome:1.0.154.48:::::::*`
google	chrome	1.0.154.52	-	-	`cpe:2.3:a:google:chrome:1.0.154.52:::::::*`
google	chrome	1.0.154.53	-	-	`cpe:2.3:a:google:chrome:1.0.154.53:::::::*`
google	chrome	1.0.154.59	-	-	`cpe:2.3:a:google:chrome:1.0.154.59:::::::*`
google	chrome	1.0.154.64	-	-	`cpe:2.3:a:google:chrome:1.0.154.64:::::::*`
google	chrome	1.0.154.65	-	-	`cpe:2.3:a:google:chrome:1.0.154.65:::::::*`
google	chrome	2.0.156.1	-	-	`cpe:2.3:a:google:chrome:2.0.156.1:::::::*`
google	chrome	2.0.157.0	-	-	`cpe:2.3:a:google:chrome:2.0.157.0:::::::*`
google	chrome	2.0.157.2	-	-	`cpe:2.3:a:google:chrome:2.0.157.2:::::::*`
google	chrome	2.0.158.0	-	-	`cpe:2.3:a:google:chrome:2.0.158.0:::::::*`
google	chrome	2.0.159.0	-	-	`cpe:2.3:a:google:chrome:2.0.159.0:::::::*`
google	chrome	2.0.169.0	-	-	`cpe:2.3:a:google:chrome:2.0.169.0:::::::*`
google	chrome	2.0.169.1	-	-	`cpe:2.3:a:google:chrome:2.0.169.1:::::::*`
google	chrome	2.0.170.0	-	-	`cpe:2.3:a:google:chrome:2.0.170.0:::::::*`
google	chrome	2.0.172	-	-	`cpe:2.3:a:google:chrome:2.0.172:::::::*`
google	chrome	2.0.172.2	-	-	`cpe:2.3:a:google:chrome:2.0.172.2:::::::*`
google	chrome	2.0.172.8	-	-	`cpe:2.3:a:google:chrome:2.0.172.8:::::::*`
google	chrome	2.0.172.27	-	-	`cpe:2.3:a:google:chrome:2.0.172.27:::::::*`
google	chrome	2.0.172.28	-	-	`cpe:2.3:a:google:chrome:2.0.172.28:::::::*`
google	chrome	2.0.172.30	-	-	`cpe:2.3:a:google:chrome:2.0.172.30:::::::*`
google	chrome	2.0.172.31	-	-	`cpe:2.3:a:google:chrome:2.0.172.31:::::::*`
google	chrome	2.0.172.33	-	-	`cpe:2.3:a:google:chrome:2.0.172.33:::::::*`
google	chrome	2.0.172.37	-	-	`cpe:2.3:a:google:chrome:2.0.172.37:::::::*`
google	chrome	2.0.172.38	-	-	`cpe:2.3:a:google:chrome:2.0.172.38:::::::*`
google	chrome	3.0.182.2	-	-	`cpe:2.3:a:google:chrome:3.0.182.2:::::::*`
google	chrome	3.0.190.2	-	-	`cpe:2.3:a:google:chrome:3.0.190.2:::::::*`
google	chrome	3.0.193.2	-	-	`cpe:2.3:a:google:chrome:3.0.193.2:beta::::::`
google	chrome	3.0.195.2	-	-	`cpe:2.3:a:google:chrome:3.0.195.2:::::::*`
google	chrome	3.0.195.21	-	-	`cpe:2.3:a:google:chrome:3.0.195.21:::::::*`
google	chrome	3.0.195.24	-	-	`cpe:2.3:a:google:chrome:3.0.195.24:::::::*`
google	chrome	3.0.195.25	-	-	`cpe:2.3:a:google:chrome:3.0.195.25:::::::*`
google	chrome	3.0.195.27	-	-	`cpe:2.3:a:google:chrome:3.0.195.27:::::::*`
google	chrome	3.0.195.32	-	-	`cpe:2.3:a:google:chrome:3.0.195.32:::::::*`
google	chrome	3.0.195.33	-	-	`cpe:2.3:a:google:chrome:3.0.195.33:::::::*`
google	chrome	3.0.195.36	-	-	`cpe:2.3:a:google:chrome:3.0.195.36:::::::*`
google	chrome	3.0.195.37	-	-	`cpe:2.3:a:google:chrome:3.0.195.37:::::::*`
google	chrome	3.0.195.38	-	-	`cpe:2.3:a:google:chrome:3.0.195.38:::::::*`
google	chrome	4.1	-	-	`cpe:2.3:a:google:chrome:4.1:beta::::::`
google	chrome	4.1.249.0	-	-	`cpe:2.3:a:google:chrome:4.1.249.0:::::::*`
google	chrome	4.1.249.1001	-	-	`cpe:2.3:a:google:chrome:4.1.249.1001:::::::*`
google	chrome	4.1.249.1004	-	-	`cpe:2.3:a:google:chrome:4.1.249.1004:::::::*`
google	chrome	4.1.249.1006	-	-	`cpe:2.3:a:google:chrome:4.1.249.1006:::::::*`
google	chrome	4.1.249.1007	-	-	`cpe:2.3:a:google:chrome:4.1.249.1007:::::::*`
google	chrome	4.1.249.1008	-	-	`cpe:2.3:a:google:chrome:4.1.249.1008:::::::*`
google	chrome	4.1.249.1009	-	-	`cpe:2.3:a:google:chrome:4.1.249.1009:::::::*`
google	chrome	4.1.249.1010	-	-	`cpe:2.3:a:google:chrome:4.1.249.1010:::::::*`
google	chrome	4.1.249.1011	-	-	`cpe:2.3:a:google:chrome:4.1.249.1011:::::::*`
google	chrome	4.1.249.1012	-	-	`cpe:2.3:a:google:chrome:4.1.249.1012:::::::*`
google	chrome	4.1.249.1013	-	-	`cpe:2.3:a:google:chrome:4.1.249.1013:::::::*`
google	chrome	4.1.249.1014	-	-	`cpe:2.3:a:google:chrome:4.1.249.1014:::::::*`
google	chrome	4.1.249.1015	-	-	`cpe:2.3:a:google:chrome:4.1.249.1015:::::::*`
google	chrome	4.1.249.1016	-	-	`cpe:2.3:a:google:chrome:4.1.249.1016:::::::*`
google	chrome	4.1.249.1017	-	-	`cpe:2.3:a:google:chrome:4.1.249.1017:::::::*`
google	chrome	4.1.249.1018	-	-	`cpe:2.3:a:google:chrome:4.1.249.1018:::::::*`
google	chrome	4.1.249.1019	-	-	`cpe:2.3:a:google:chrome:4.1.249.1019:::::::*`
google	chrome	4.1.249.1020	-	-	`cpe:2.3:a:google:chrome:4.1.249.1020:::::::*`
google	chrome	4.1.249.1021	-	-	`cpe:2.3:a:google:chrome:4.1.249.1021:::::::*`
google	chrome	4.1.249.1022	-	-	`cpe:2.3:a:google:chrome:4.1.249.1022:::::::*`
google	chrome	4.1.249.1023	-	-	`cpe:2.3:a:google:chrome:4.1.249.1023:::::::*`
google	chrome	4.1.249.1024	-	-	`cpe:2.3:a:google:chrome:4.1.249.1024:::::::*`
google	chrome	4.1.249.1025	-	-	`cpe:2.3:a:google:chrome:4.1.249.1025:::::::*`
google	chrome	4.1.249.1026	-	-	`cpe:2.3:a:google:chrome:4.1.249.1026:::::::*`
google	chrome	4.1.249.1027	-	-	`cpe:2.3:a:google:chrome:4.1.249.1027:::::::*`
google	chrome	4.1.249.1028	-	-	`cpe:2.3:a:google:chrome:4.1.249.1028:::::::*`
google	chrome	4.1.249.1029	-	-	`cpe:2.3:a:google:chrome:4.1.249.1029:::::::*`
google	chrome	4.1.249.1030	-	-	`cpe:2.3:a:google:chrome:4.1.249.1030:::::::*`
google	chrome	4.1.249.1031	-	-	`cpe:2.3:a:google:chrome:4.1.249.1031:::::::*`
google	chrome	4.1.249.1032	-	-	`cpe:2.3:a:google:chrome:4.1.249.1032:::::::*`
google	chrome	4.1.249.1033	-	-	`cpe:2.3:a:google:chrome:4.1.249.1033:::::::*`
google	chrome	4.1.249.1034	-	-	`cpe:2.3:a:google:chrome:4.1.249.1034:::::::*`
google	chrome	4.1.249.1035	-	-	`cpe:2.3:a:google:chrome:4.1.249.1035:::::::*`
google	chrome	4.1.249.1036	-	-	`cpe:2.3:a:google:chrome:4.1.249.1036:::::::*`
google	chrome	4.1.249.1042	-	-	`cpe:2.3:a:google:chrome:4.1.249.1042:::::::*`
google	chrome	4.1.249.1045	-	-	`cpe:2.3:a:google:chrome:4.1.249.1045:::::::*`
google	chrome	4.1.249.1046	-	-	`cpe:2.3:a:google:chrome:4.1.249.1046:::::::*`
google	chrome	4.1.249.1047	-	-	`cpe:2.3:a:google:chrome:4.1.249.1047:::::::*`
google	chrome	4.1.249.1048	-	-	`cpe:2.3:a:google:chrome:4.1.249.1048:::::::*`
google	chrome	4.1.249.1049	-	-	`cpe:2.3:a:google:chrome:4.1.249.1049:::::::*`
google	chrome	4.1.249.1050	-	-	`cpe:2.3:a:google:chrome:4.1.249.1050:::::::*`
google	chrome	4.1.249.1051	-	-	`cpe:2.3:a:google:chrome:4.1.249.1051:::::::*`
google	chrome	4.1.249.1052	-	-	`cpe:2.3:a:google:chrome:4.1.249.1052:::::::*`
google	chrome	4.1.249.1053	-	-	`cpe:2.3:a:google:chrome:4.1.249.1053:::::::*`
google	chrome	4.1.249.1054	-	-	`cpe:2.3:a:google:chrome:4.1.249.1054:::::::*`
google	chrome	4.1.249.1055	-	-	`cpe:2.3:a:google:chrome:4.1.249.1055:::::::*`
google	chrome	4.1.249.1056	-	-	`cpe:2.3:a:google:chrome:4.1.249.1056:::::::*`
google	chrome	4.1.249.1057	-	-	`cpe:2.3:a:google:chrome:4.1.249.1057:::::::*`
google	chrome	4.1.249.1058	-	-	`cpe:2.3:a:google:chrome:4.1.249.1058:::::::*`
google	chrome	4.1.249.1059	-	-	`cpe:2.3:a:google:chrome:4.1.249.1059:::::::*`
google	chrome	4.1.249.1060	-	-	`cpe:2.3:a:google:chrome:4.1.249.1060:::::::*`
google	chrome	4.1.249.1061	-	-	`cpe:2.3:a:google:chrome:4.1.249.1061:::::::*`
google	chrome	4.1.249.1062	-	-	`cpe:2.3:a:google:chrome:4.1.249.1062:::::::*`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）

临时解决方案:

（暂无数据）

参考链接

39651 third-party-advisory
cve.org

访问

无标题 x_refsource_CONFIRM
cve.org

访问

无标题 x_refsource_CONFIRM
cve.org

访问

oval:org.mitre.oval:def:6813 vdb-entry
cve.org

访问

ADV-2010-1016 vdb-entry
cve.org

访问

ExploitDB EDB-12657 EXPLOIT
exploitdb

访问

Download Exploit EDB-12657 EXPLOIT
exploitdb

访问

CVE Reference: CVE-2010-1663 ADVISORY
cve.org

访问

CVSS评分详情

10.0

CRITICAL

CVSS向量: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS版本: 2.0

机密性

COMPLETE

完整性

COMPLETE

可用性

COMPLETE

时间信息

发布时间:

2010-04-30 17:00:00

修改时间:

2024-08-07 01:28:42

创建时间:

2025-11-11 15:33:08

更新时间:

2025-11-11 16:05:06

利用信息

此漏洞有可利用代码！

利用代码数量: 1

利用来源:

未知

数据源详情

数据源	记录ID	版本	提取时间
CVE	`cve_CVE-2010-1663`	2025-11-11 15:18:16	2025-11-11 07:33:08
NVD	`nvd_CVE-2010-1663`	2025-11-11 14:53:25	2025-11-11 07:41:56
CNNVD	`cnnvd_CNNVD-201005-014`	2025-11-11 15:09:09	2025-11-11 07:49:43
EXPLOITDB	`exploitdb_EDB-12657`	2025-11-11 15:05:55	2025-11-11 08:05:06

版本与语言

当前版本: v4

主要语言: EN

支持语言:

EN ZH

其他标识符:

安全公告

暂无安全公告信息

变更历史

v4 EXPLOITDB

2025-11-11 16:05:06

references_count: 5 → 8; tags_count: 0 → 4; data_sources: ['cnnvd', 'cve', 'nvd'] → ['cnnvd', 'cve', 'exploitdb', 'nvd']

查看详细变更

references_count: 5 -> 8
tags_count: 0 -> 4
data_sources: ['cnnvd', 'cve', 'nvd'] -> ['cnnvd', 'cve', 'exploitdb', 'nvd']

v3 CNNVD

2025-11-11 15:49:43

vulnerability_type: 未提取 → 授权问题; cnnvd_id: 未提取 → CNNVD-201005-014; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']

查看详细变更

vulnerability_type: 未提取 -> 授权问题
cnnvd_id: 未提取 -> CNNVD-201005-014
data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']

v2 NVD

2025-11-11 15:41:56

severity: SeverityLevel.MEDIUM → SeverityLevel.CRITICAL; cvss_score: 未提取 → 10.0; cvss_vector: NOT_EXTRACTED → AV:N/AC:L/Au:N/C:C/I:C/A:C; cvss_version: NOT_EXTRACTED → 2.0; affected_products_count: 0 → 108; data_sources: ['cve'] → ['cve', 'nvd']

查看详细变更

severity: SeverityLevel.MEDIUM -> SeverityLevel.CRITICAL
cvss_score: 未提取 -> 10.0
cvss_vector: NOT_EXTRACTED -> AV:N/AC:L/Au:N/C:C/I:C/A:C
cvss_version: NOT_EXTRACTED -> 2.0
affected_products_count: 0 -> 108
data_sources: ['cve'] -> ['cve', 'nvd']

CVE-2010-1663 (CNNVD-201005-014)

中文标题:

Google Chrome 'Google URL'解析库未明漏洞

英文标题:

The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before 4.1.249.1064 allows ...

漏洞描述

中文描述:

英文描述:

CWE类型:

标签:

受影响产品

解决方案

中文解决方案:

英文解决方案:

临时解决方案:

参考链接

CVSS评分详情

时间信息

利用信息

数据源详情

版本与语言

安全公告

变更历史