Lucene search

MitreCVE-2011-3055

HistoryMar 22, 2012 - 4:55 p.m.

CVE-2011-3055

2012-03-2216:55:01

CWE-306

mitre

web.nvd.nist.gov

cve-2011-3055

google chrome

remote attackers

user confirmation

unpacked extension installation

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

Low

EPSS

0.004

Percentile

72.4%

JSON

The browser native UI in Google Chrome before 17.0.963.83 does not require user confirmation before an unpacked extension installation, which allows user-assisted remote attackers to have an unspecified impact via a crafted extension.

Affected configurations

Nvd

Node

googlechromeRange<17.0.963.83

Node

opensuseopensuseMatch12.1

VendorProductVersionCPE
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
opensuseopensuse12.1cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	chrome	*	cpe:2.3:a:google:chrome::::::::
opensuse	opensuse	12.1	cpe:2.3:o:opensuse:opensuse:12.1:::::::*

References

code.google.com/p/chromium/issues/detail?id=117736

googlechromereleases.blogspot.com/2012/03/stable-channel-update_21.html

lists.opensuse.org/opensuse-security-announce/2012-04/msg00000.html

secunia.com/advisories/48512

secunia.com/advisories/48527

security.gentoo.org/glsa/glsa-201203-19.xml

www.securityfocus.com/bid/52674

www.securitytracker.com/id?1026841

exchange.xforce.ibmcloud.com/vulnerabilities/74215

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15033

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

Low

EPSS

0.004

Percentile

72.4%

JSON

Related for CVE-2011-3055