CVE-2011-2785 Information

Description

The extensions implementation in Google Chrome before 13.0.782.107 does not properly validate the URL for the home page which allows remote attackers to have an unspecified impact via a crafted extension.

Reference

http://code.google.com/p/chromium/issues/detail?id=84402 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html http://osvdb.org/74235 https://exchange.xforce.ibmcloud.com/vulnerabilities/68947 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A14298

Share on: