CVE-2013-2876 — Google Chrome vulnerability

CWE-2642 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
0.4%
top 42.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Google ChromeDebian Linux
Timeline
PublishedJul 10
Latest updateMay 17

Description

browser/extensions/api/tabs/tabs_api.cc in Google Chrome before 28.0.1500.71 does not properly enforce restrictions on the capture of screenshots by extensions, which allows remote attackers to obtain sensitive information about the content of a previous page via vectors involving an interstitial page.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDgoogle/chrome28.0.1500.70+62

Also affects: Debian Linux 7.0

🔴Vulnerability Details

1
GHSA
GHSA-93x9-vchg-cxph: browser/extensions/api/tabs/tabs_api↗2022-05-17
▶
CVE-2013-2876 — Google Chrome vulnerability | cvebase