CVE-2013-2868 — Google Chrome vulnerability

2 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
0.4%
top 40.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Google ChromeDebian Linux
Timeline
PublishedJul 10
Latest updateMay 17

Description

common/extensions/sync_helper.cc in Google Chrome before 28.0.1500.71 proceeds with sync operations for NPAPI extensions without checking for a certain plugin permission setting, which might allow remote attackers to trigger unwanted extension changes via unspecified vectors.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDgoogle/chrome28.0.1500.70+62

Also affects: Debian Linux 7.0

🔴Vulnerability Details

1
GHSA
GHSA-9237-5p9r-6mc4: common/extensions/sync_helper↗2022-05-17
▶
CVE-2013-2868 — Google Chrome vulnerability | cvebase