CVE-2009-2973

Google Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509 certificate signed with the (1) MD2 or (2) MD4 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary HTTPS servers via a crafted certificate, a related issue to CVE-2009-2409.

• CWE-310

• http://code.google.com/p/chromium/issues/detail?id=18725Vendor Advisory
• http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.htmlVendor Advisory
• http://secunia.com/advisories/36417Vendor Advisory
• http://www.vupen.com/english/advisories/2009/2420Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52903
• http://code.google.com/p/chromium/issues/detail?id=18725Vendor Advisory
• http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.htmlVendor Advisory
• http://secunia.com/advisories/36417Vendor Advisory
• http://www.vupen.com/english/advisories/2009/2420Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52903

Published

Aug 27, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2965Cross-site scripting (XSS) vulnerability in entry/index.jsp …
• CVE-2009-2966avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Vi…
• CVE-2009-2967Multiple cross-site scripting (XSS) vulnerabilities in Build…
• CVE-2009-2968Directory traversal vulnerability in a support component in …
• CVE-2009-2970Stack-based buffer overflow in the GetUiDllVersion function …
• CVE-2009-2972in.lpd in the print service in Sun Solaris 8 and 9 allows re…
• CVE-2009-2974Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows rem…
• CVE-2009-2975Mozilla Firefox 3.5.2 on Windows XP, in some situations poss…
• CVE-2009-2976Cisco Aironet Lightweight Access Point (AP) devices send the…
• CVE-2009-2977The Cisco Security Monitoring, Analysis and Response System …
• CVE-2009-2978SQL injection vulnerability in SugarCRM 4.5.1o and earlier, …
• CVE-2009-2979Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, a…