Google Chrome before 13.0.782.107 does not ensure that developer-mode NPAPI extension installations are confirmed by a browser dialog, which makes it easier for remote attackers to modify the product's functionality via a Trojan horse extension.
References
Configurations
History
No history.
Information
Published : 2011-08-03 00:55
Updated : 2024-02-04 17:54
NVD link : CVE-2011-2783
Mitre link : CVE-2011-2783
CVE.ORG link : CVE-2011-2783
JSON object : View
Products Affected
- chrome
CWE
CWE-20
Improper Input Validation