CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
Percentile
81.6%
Google Chrome before 13.0.782.107 does not ensure that developer-mode NPAPI
extension installations are confirmed by a browser dialog, which makes it
easier for remote attackers to modify the product’s functionality via a
Trojan horse extension.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 10.04 | noarch | chromium-browser | < 14.0.835.202~r103287-0ubuntu0.10.04.2 | UNKNOWN |
ubuntu | 10.10 | noarch | chromium-browser | < 14.0.835.202~r103287-0ubuntu0.10.10.1 | UNKNOWN |
ubuntu | 11.04 | noarch | chromium-browser | < 14.0.835.202~r103287-0ubuntu0.11.04.1 | UNKNOWN |