Design/Logic Flaw

2013-07-1010:55:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.7%

JSON

browser/extensions/api/tabs/tabs_api.cc in Google Chrome before 28.0.1500.71 does not properly enforce restrictions on the capture of screenshots by extensions, which allows remote attackers to obtain sensitive information about the content of a previous page via vectors involving an interstitial page.

CPENameOperatorVersion
debian_linuxeq7.0
chromeeq28.0.1500.68
chromeeq28.0.1500.26
chromeeq28.0.1500.31
chromeeq28.0.1500.0
chromeeq28.0.1500.33
chromeeq28.0.1500.29
chromeeq28.0.1500.25
chromeeq28.0.1500.66
chromeeq28.0.1500.41

Name	Operator	Version
debian_linux	eq	7.0
chrome	eq	28.0.1500.68
chrome	eq	28.0.1500.26
chrome	eq	28.0.1500.31
chrome	eq	28.0.1500.0
chrome	eq	28.0.1500.33
chrome	eq	28.0.1500.29
chrome	eq	28.0.1500.25
chrome	eq	28.0.1500.66
chrome	eq	28.0.1500.41