CVEvulnerability
CVE-2013-0885
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-02-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-732
Description
Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict API privileges during interaction with the Chrome Web Store, which has unspecified impact and attack vectors.
Affected configurations
• opensuse opensuse 12.1
• opensuse opensuse 12.2
• google chrome (< 25.0.1364.97)
• google chrome (< 25.0.1364.99)
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html lists.opensuse.org
- https://code.google.com/p/chromium/issues/detail?id=172369 code.google.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16255 oval.cisecurity.org
- http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html lists.opensuse.org
- https://code.google.com/p/chromium/issues/detail?id=172369 code.google.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16255 oval.cisecurity.org