FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2011-2785

This CVE name corresponds to:

Entered Topic
2010-12-07 chromium -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2011-2785
Phase Assigned(20110720)

Description

The extensions implementation in Google Chrome before 13.0.782.107 does not properly validate the URL for the home page, which allows remote attackers to have an unspecified impact via a crafted extension.

References

Source Reference
CONFIRM http://code.google.com/p/chromium/issues/detail?id=84402
CONFIRM http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html
OSVDB 74235
OVAL oval:org.mitre.oval:def:14298
XF google-chrome-homepage-sec-bypass(68947)