high7.5
CVE-2013-0924
The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has…
Impact
The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | through 26.0.1410.42 Versions 26.0.1410.0, 26.0.1410.1, 26.0.1410.2, 26.0.1410.3, 26.0.1410.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html
- https://code.google.com/p/chromium/issues/detail?id=169632
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16674
- http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html
- https://code.google.com/p/chromium/issues/detail?id=169632
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16674