CVE-2011-2783

{"id": "CVE-2011-2783", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2011-08-03T00:55:01.737", "references": [{"url": "http://code.google.com/p/chromium/issues/detail?id=83273", "source": "chrome-cve-admin@google.com"}, {"url": "http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html", "source": "chrome-cve-admin@google.com"}, {"url": "http://osvdb.org/74233", "source": "chrome-cve-admin@google.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68945", "source": "chrome-cve-admin@google.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14406", "source": "chrome-cve-admin@google.com"}, {"url": "http://code.google.com/p/chromium/issues/detail?id=83273", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/74233", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68945", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14406", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Google Chrome before 13.0.782.107 does not ensure that developer-mode NPAPI extension installations are confirmed by a browser dialog, which makes it easier for remote attackers to modify the product's functionality via a Trojan horse extension."}, {"lang": "es", "value": "Google Chrome anterior a v13.0.782.107 no asegura que en modo desarrolador, las instalaciones de extensi\u00f3n NPAPI han sido confirmadas por un cuadro de di\u00e1logo del navegador, lo que hace que sea m\u00e1s f\u00e1cil para los atacantes remotos modificar la funcionalidad del producto a trav\u00e9s de una extensi\u00f3n con un troyano."}], "lastModified": "2024-11-21T01:28:58.170", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0449DAC-673D-4A39-8DD6-F533629AF1A4", "versionEndExcluding": "13.0.782.107"}], "operator": "OR"}]}], "sourceIdentifier": "chrome-cve-admin@google.com"}