CVE-2013-0925 - Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs (aka APIPermission::kTab) permission before providing a URL to this extension, which has unspecified impact and remote attack vectors

Back Back to CVE browser

HIGH

Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs (aka APIPermission::kTab) permission before providing a URL to this extension, which has unspecified impact and remote attack vectors

Published Mar 28, 2013

7.5

HIGH

CVSS 2.0

EPSS 0.79%

Description

Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs (aka APIPermission::kTab) permission before providing a URL to this extension, which has unspecified impact and remote attack vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (4)

http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html
x_refsource_CONFIRM
https://code.google.com/p/chromium/issues/detail?id=168442
x_refsource_CONFIRM
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-0936
Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16363
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html		x_refsource_CONFIRM
https://code.google.com/p/chromium/issues/detail?id=168442		x_refsource_CONFIRM
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-0936		Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16363		vdb-entrysignaturex_refsource_OVAL