CVE

Id
50967  
CVE No.
CVE-2011-3055  
Status
Candidate  
Description
The browser native UI in Google Chrome before 17.0.963.83 does not require user confirmation before an unpacked extension installation, which allows user-assisted remote attackers to have an unspecified impact via a crafted extension.  
Phase
Assigned (20110809)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
550053 50967 CVE-2011-3055 CONFIRM:http://code.google.com/p/chromium/issues/detail?id=117736  View
550054 50967 CVE-2011-3055 CONFIRM:http://googlechromereleases.blogspot.com/2012/03/stable-channel-update_21.html  View
550055 50967 CVE-2011-3055 GENTOO:GLSA-201203-19  View
550056 50967 CVE-2011-3055 URL:http://security.gentoo.org/glsa/glsa-201203-19.xml  View
550057 50967 CVE-2011-3055 BID:52674  View
550058 50967 CVE-2011-3055 URL:http://www.securityfocus.com/bid/52674  View
550059 50967 CVE-2011-3055 OVAL:oval:org.mitre.oval:def:15033  View
550060 50967 CVE-2011-3055 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15033  View
550061 50967 CVE-2011-3055 SECTRACK:1026841  View
550062 50967 CVE-2011-3055 URL:http://www.securitytracker.com/id?1026841  View
550063 50967 CVE-2011-3055 SECUNIA:48512  View
550064 50967 CVE-2011-3055 URL:http://secunia.com/advisories/48512  View
550065 50967 CVE-2011-3055 SECUNIA:48527  View
550066 50967 CVE-2011-3055 URL:http://secunia.com/advisories/48527  View
550067 50967 CVE-2011-3055 XF:google-nativeui-weak-security(74215)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26263 JVNDB-2012-001970 複数の製品で使用される Webkit におけるサービス運用妨害 (out-of-bounds read) の脆弱性 Google Chrome は、テキストフラグメントを適切に処理しないため、サービス運用妨害 (out-of-bounds read) 状態となる脆弱性が存在します。 CVE-2011-3060 50967 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001970.html  View