CVE:CVE-2008-7294
CNNVD:CNNVD-201108-144
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。
Google Chrome 4.0.211.0之前版本中不能正确限制建立在HTTPS会话中的cookies的修改。中间人攻击者可借助HTTP响应中的Set-Cookie头覆盖或者删除任意cookies。
solution:Upgrade google chrome to a higher version than 3.0.195.38,0.1.38.1,0.1.38.2,0.1.38.4,0.1.40.1,0.1.42.2,0.1.42.3,0.2.149.27,0.2.149.29,0.2.149.30,0.2.152.1,0.2.153.1,0.3.154.0,0.3.154.3,0.4.154.18,0.4.154.22,0.4.154.31,0.4.154.33,1.0.154.36,1.0.154.39,1.0.154.42,1.0.154.43,1.0.154.46,1.0.154.48,1.0.154.52,1.0.154.53,1.0.154.59,1.0.154.64,1.0.154.65,2.0.156.1,2.0.157.0,2.0.157.2,2.0.158.0,2.0.159.0,2.0.169.0,2.0.169.1,2.0.170.0,2.0.172,2.0.172.2,2.0.172.8,2.0.172.27,2.0.172.28,2.0.172.30,2.0.172.31,2.0.172.33,2.0.172.37,2.0.172.38,3.0.182.2,3.0.190.2,3.0.193.2:beta,3.0.195.2,3.0.195.21,3.0.195.24,3.0.195.25,3.0.195.27,3.0.195.32,3.0.195.33,3.0.195.36,3.0.195.37,and avoid the version (,3.0.195.38],0.1.38.1,0.1.38.2,0.1.38.4,0.1.40.1,0.1.42.2,0.1.42.3,0.2.149.27,0.2.149.29,0.2.149.30,0.2.152.1,0.2.153.1,0.3.154.0,0.3.154.3,0.4.154.18,0.4.154.22,0.4.154.31,0.4.154.33,1.0.154.36,1.0.154.39,1.0.154.42,1.0.154.43,1.0.154.46,1.0.154.48,1.0.154.52,1.0.154.53,1.0.154.59,1.0.154.64,1.0.154.65,2.0.156.1,2.0.157.0,2.0.157.2,2.0.158.0,2.0.159.0,2.0.169.0,2.0.169.1,2.0.170.0,2.0.172,2.0.172.2,2.0.172.8,2.0.172.27,2.0.172.28,2.0.172.30,2.0.172.31,2.0.172.33,2.0.172.37,2.0.172.38,3.0.182.2,3.0.190.2,3.0.193.2:beta,3.0.195.2,3.0.195.21,3.0.195.24,3.0.195.25,3.0.195.27,3.0.195.32,3.0.195.33,3.0.195.36,3.0.195.37