CVE-2014-3172 in Google Chrome
Sumário (Inglês)
The Debugger extension API in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 37.0.2062.94 does not validate a tab's URL before an attach operation, which allows remote attackers to bypass intended access limitations via an extension that uses a restricted URL, as demonstrated by a chrome:// URL.
Reservar
03/05/2014
Divulgação
26/08/2014
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 67414 | Google Chrome Extension Debugger Elevação de Privilégios | 264 | Não provado | Correção oficial | CVE-2014-3172 |