CVE-2018-18344

MEDIUM6.5

Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71

Published Dec 11, 2018

Modified 1 years ago

Details

Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension.

References

WEB

http://www.securityfocus.com/bid/106084

ADVISORY

https://access.redhat.com/errata/RHSA-2018:3803

WEB

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

WEB

https://crbug.com/866426

ADVISORY

https://security.gentoo.org/glsa/201908-18

ADVISORY