CVE-2010-3417

Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, which allows attackers to obtain potentially sensitive information via unspecified vectors.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2010-09-16

Last modified

2024-08-07

Weaknesses

CWE-200

Affected products

• Chrome (Google)

References

• http://code.google.com/p/chromium/issues/detail?id=54006
• http://googlechromereleases.blogspot.com/2010/09/stable-beta-channel-updates_14.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7371