CVE

Id
50695  
CVE No.
CVE-2011-2783  
Status
Candidate  
Description
Google Chrome before 13.0.782.107 does not ensure that developer-mode NPAPI extension installations are confirmed by a browser dialog, which makes it easier for remote attackers to modify the product"s functionality via a Trojan horse extension.  
Phase
Assigned (20110720)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
547333 50695 CVE-2011-2783 CONFIRM:http://code.google.com/p/chromium/issues/detail?id=83273  View
547334 50695 CVE-2011-2783 CONFIRM:http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html  View
547335 50695 CVE-2011-2783 OSVDB:74233  View
547336 50695 CVE-2011-2783 URL:http://osvdb.org/74233  View
547337 50695 CVE-2011-2783 OVAL:oval:org.mitre.oval:def:14406  View
547338 50695 CVE-2011-2783 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14406  View
547339 50695 CVE-2011-2783 XF:google-chrome-npapi-code-execution(68945)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32720 JVNDB-2011-002960 Google Chrome の inspector serialization 機能におけるバッファオーバーフローの脆弱性 Google Chrome の inspector serialization 機能には、バッファオーバーフローの脆弱性が存在します。 CVE-2011-2788 50695 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002960.html  View