Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-0924

The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors.

Published

2013-03-28T12:18:52.140

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application google chrome ≤ 26.0.1410.42 Yes
Application google chrome 26.0.1410.0 Yes
Application google chrome 26.0.1410.1 Yes
Application google chrome 26.0.1410.2 Yes
Application google chrome 26.0.1410.3 Yes
Application google chrome 26.0.1410.4 Yes
Application google chrome 26.0.1410.5 Yes
Application google chrome 26.0.1410.6 Yes
Application google chrome 26.0.1410.7 Yes
Application google chrome 26.0.1410.8 Yes
Application google chrome 26.0.1410.9 Yes
Application google chrome 26.0.1410.10 Yes
Application google chrome 26.0.1410.11 Yes
Application google chrome 26.0.1410.12 Yes
Application google chrome 26.0.1410.14 Yes
Application google chrome 26.0.1410.15 Yes
Application google chrome 26.0.1410.16 Yes
Application google chrome 26.0.1410.17 Yes
Application google chrome 26.0.1410.18 Yes
Application google chrome 26.0.1410.19 Yes
Application google chrome 26.0.1410.20 Yes
Application google chrome 26.0.1410.21 Yes
Application google chrome 26.0.1410.22 Yes
Application google chrome 26.0.1410.23 Yes
Application google chrome 26.0.1410.24 Yes
Application google chrome 26.0.1410.25 Yes
Application google chrome 26.0.1410.26 Yes
Application google chrome 26.0.1410.27 Yes
Application google chrome 26.0.1410.28 Yes
Application google chrome 26.0.1410.29 Yes
Application google chrome 26.0.1410.30 Yes
Application google chrome 26.0.1410.31 Yes
Application google chrome 26.0.1410.32 Yes
Application google chrome 26.0.1410.33 Yes
Application google chrome 26.0.1410.34 Yes
Application google chrome 26.0.1410.35 Yes
Application google chrome 26.0.1410.36 Yes
Application google chrome 26.0.1410.37 Yes
Application google chrome 26.0.1410.38 Yes
Application google chrome 26.0.1410.39 Yes
Application google chrome 26.0.1410.40 Yes
Application google chrome 26.0.1410.41 Yes
References