← Back

CVE-2013-2876

nvd nist
Published: Jul 10, 2013Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

browser/extensions/api/tabs/tabs_api.cc in Google Chrome before 28.0.1500.71 does not properly enforce restrictions on the capture of screenshots by extensions, which allows remote attackers to obtain sensitive information about the content of a previous page via vectors involving an interstitial page.

Affected (64)

1 product
Debian Linux
1 product
Chrome
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 7.0
Configuration B
63 vulnerable
Vulnerable SoftwareAffected Versions
Google
Up to 28.0.1500.70
Version 28.0.1500.0
Version 28.0.1500.10
Version 28.0.1500.11
Version 28.0.1500.12
Version 28.0.1500.13
Version 28.0.1500.14
Version 28.0.1500.15
Version 28.0.1500.16
Version 28.0.1500.17
Version 28.0.1500.18
Version 28.0.1500.19
Version 28.0.1500.20
Version 28.0.1500.21
Version 28.0.1500.22
Version 28.0.1500.23
Version 28.0.1500.24
Version 28.0.1500.25
Version 28.0.1500.26
Version 28.0.1500.27
Version 28.0.1500.28
Version 28.0.1500.29
Version 28.0.1500.2
Version 28.0.1500.31
Version 28.0.1500.32
Version 28.0.1500.33
Version 28.0.1500.34
Version 28.0.1500.35
Version 28.0.1500.36
Version 28.0.1500.37
Version 28.0.1500.38
Version 28.0.1500.39
Version 28.0.1500.3
Version 28.0.1500.40
Version 28.0.1500.41
Version 28.0.1500.42
Version 28.0.1500.43
Version 28.0.1500.44
Version 28.0.1500.45
Version 28.0.1500.46
Version 28.0.1500.47
Version 28.0.1500.48
Version 28.0.1500.49
Version 28.0.1500.4
Version 28.0.1500.50
Version 28.0.1500.51
Version 28.0.1500.52
Version 28.0.1500.53
Version 28.0.1500.54
Version 28.0.1500.56
Version 28.0.1500.58
Version 28.0.1500.59
Version 28.0.1500.5
Version 28.0.1500.60
Version 28.0.1500.61
Version 28.0.1500.62
Version 28.0.1500.63
Version 28.0.1500.64
Version 28.0.1500.66
Version 28.0.1500.68
Version 28.0.1500.6
Version 28.0.1500.8
Version 28.0.1500.9

Related CWEs

Timeline

No history available yet.