[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2009-3931":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":18,"cwes":19,"cpes":21,"technologies":65,"references":67,"score":81,"epss_score":82,"epss_percentile":83,"is_kev":84,"cisa_kev_date_added":85,"cisa_kev_due_date":85,"cisa_ssvc":86,"attack_mappings":92,"exploits":99},145975,"CVE-2009-3931","EUVD-2009-3902","Incomplete blacklist vulnerability in browser\u002Fdownload\u002Fdownload_exe.cc in Google Chrome before 3.0.195.32 allows remote attackers to force the download of certain dangerous files via a \"Content-Disposition: attachment\" designation, as demonstrated by (1) .mht and (2) .mhtml files, which are automatically executed by Internet Explorer 6; (3) .svg files, which are automatically executed by Safari; (4) .xml files; (5) .htt files; (6) .xsl files; (7) .xslt files; and (8) image files that are forbidden by the victim's site policy.","2009-11-12T17:54:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",9.3,"NETWORK","AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","NONE","COMPLETE","MEDIUM",true,[20],"CWE-20",[22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64],"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",[66],"Google Chrome",[68,69,70,71,72,73,74,75,76,77,78,79,80],"http:\u002F\u002Fcode.google.com\u002Fp\u002Fchromium\u002Fissues\u002Fdetail?id=23979","http:\u002F\u002Fcodereview.chromium.org\u002F243115","http:\u002F\u002Fcodereview.chromium.org\u002F261022","http:\u002F\u002Fcodereview.chromium.org\u002Fdownload\u002Fissue243115_2002.diff","http:\u002F\u002Fcodereview.chromium.org\u002Fdownload\u002Fissue261022_1.diff","http:\u002F\u002Fgooglechromereleases.blogspot.com\u002F2009\u002F11\u002Fstable-channel-update.html","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F37273","http:\u002F\u002Fsecurethoughts.com\u002F2009\u002F11\u002Fusing-blended-browser-threats-involving-chrome-to-steal-files-on-your-computer\u002F","http:\u002F\u002Fwww.osvdb.org\u002F59742","http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F507713","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F36947","http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2009\u002F3159","https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F54171",0.67,0.02254,0.82827,false,null,{"timestamp":85,"automatable":87,"tech_impact":88,"exploitation":89,"cisa_decision":90,"cisa_remediation_timeline":91},"no","partial","none",{},"FSU",[93],{"name":94,"source":95,"tactics":96,"technique_id":98},"Exploit Public-Facing Application","attack_vector",[97],"initial-access","T1190",[]]