EUVD-2025-33277

🗓️ 08 Oct 2025 22:04:12Reported by EUVDType

Chrome extension v0.4.9 used DGA to fetch malicious script for ad fraud and credential theft; fixed in v0.5.0.

Reporter	Title	Published	Views	Family All 8
CNNVD	Web Developer for Chrome 安全漏洞	8 Oct 202500:00	–	cnnvd
CVE	CVE-2017-20202	8 Oct 202522:04	–	cve
Cvelist	CVE-2017-20202 Web Developer for Chrome v0.4.9 Malicious Backdoor Supply Chain Compromise	8 Oct 202522:04	–	cvelist
NVD	CVE-2017-20202	8 Oct 202522:15	–	nvd
Positive Technologies	PT-2025-41313	8 Oct 202500:00	–	ptsecurity
RedhatCVE	CVE-2017-20202	10 Oct 202518:27	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2017-20202	1 Aug 201700:00	–	vulncheck_kev
Vulnrichment	CVE-2017-20202 Web Developer for Chrome v0.4.9 Malicious Backdoor Supply Chain Compromise	8 Oct 202522:04	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "cc8c9b31-513f-3364-9616-62ff8eb36c53",
        "vendor": {
          "name": "Web Developer for Chrome"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "3983e772-38c2-354d-8e2b-d612a98b2bc5",
        "product": {
          "name": "Web Developer for Chrome"
        },
        "product_version": "0.4.9"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-20202
chromewebstore	www.chromewebstore.google.com/detail/web-developer/bfbameneiokkgbdmiekhjnmfkcnldhhm
gist	www.gist.github.com/piedpiperRichard/076516da60f45842f1a6e6ae35a9a240
ui	www.ui.vision/blog/chrome-extension-adware
web	www.web.archive.org/web/20170803163618/https://chrispederick.com/blog/web-developer-for-chrome-compromised
proofpoint	www.proofpoint.com/us/threat-insight/post/threat-actor-goes-chrome-extension-hijacking-spree
vulncheck	www.vulncheck.com/advisories/web-developer-for-chrome-malicious-backdoor-supply-chain-compromise
web	www.web.archive.org/web/20170803163618/https://chrispederick.com/blog/web-developer-for-chrome-compromised/
ui	www.ui.vision/blog/chrome-extension-adware/
gist	www.gist.github.com/piedpiperRichard/076516da60f45842f1a6e6ae35a9a240/

08 Oct 2025 22:04Current

7High risk

Vulners AI Score7

CVSS 49.3

EPSS0.00116