CVEvulnerability

CVE-2013-2868

5.0 MEDIUM Published 2013-07-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-07-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

common/extensions/sync_helper.cc in Google Chrome before 28.0.1500.71 proceeds with sync operations for NPAPI extensions without checking for a certain plugin permission setting, which might allow remote attackers to trigger unwanted extension changes via unspecified vectors.

Affected configurations

• debian debian linux 7.0 • google chrome (<= 28.0.1500.70) • google chrome 28.0.1500.0 • google chrome 28.0.1500.2 • google chrome 28.0.1500.3 • google chrome 28.0.1500.4 • google chrome 28.0.1500.5 • google chrome 28.0.1500.6 • google chrome 28.0.1500.8 • google chrome 28.0.1500.9 • google chrome 28.0.1500.10 • google chrome 28.0.1500.11 • google chrome 28.0.1500.12 • google chrome 28.0.1500.13 • google chrome 28.0.1500.14 • google chrome 28.0.1500.15 • google chrome 28.0.1500.16 • google chrome 28.0.1500.17 • google chrome 28.0.1500.18 • google chrome 28.0.1500.19 • google chrome 28.0.1500.20 • google chrome 28.0.1500.21 • google chrome 28.0.1500.22 • google chrome 28.0.1500.23 • google chrome 28.0.1500.24 • google chrome 28.0.1500.25 • google chrome 28.0.1500.26 • google chrome 28.0.1500.27 • google chrome 28.0.1500.28 • google chrome 28.0.1500.29 • google chrome 28.0.1500.31 • google chrome 28.0.1500.32 • google chrome 28.0.1500.33 • google chrome 28.0.1500.34 • google chrome 28.0.1500.35 • google chrome 28.0.1500.36 • google chrome 28.0.1500.37 • google chrome 28.0.1500.38 • google chrome 28.0.1500.39 • google chrome 28.0.1500.40 • google chrome 28.0.1500.41 • google chrome 28.0.1500.42 • google chrome 28.0.1500.43 • google chrome 28.0.1500.44 • google chrome 28.0.1500.45 • google chrome 28.0.1500.46 • google chrome 28.0.1500.47 • google chrome 28.0.1500.48 • google chrome 28.0.1500.49 • google chrome 28.0.1500.50 • google chrome 28.0.1500.51 • google chrome 28.0.1500.52 • google chrome 28.0.1500.53 • google chrome 28.0.1500.54 • google chrome 28.0.1500.56 • google chrome 28.0.1500.58 • google chrome 28.0.1500.59 • google chrome 28.0.1500.60 • google chrome 28.0.1500.61 • google chrome 28.0.1500.62 … and 4 more

References