The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-03-28 05:18
Updated : 2017-09-18 18:35
NVD link : CVE-2013-0924
Mitre link : CVE-2013-0924
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
- chrome