CVE-2013-0885 Security feature bypass in n/a
An attacker can bypass API privilege restrictions in the Chrome Web Store, potentially gaining unauthorized access to browser features.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2013-0885?
CVE-2013-0885 is a high-severity vulnerability in Google Chrome, published on 23 Feb 2013. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict API privileges during interaction with the Chrome Web Store, which has unspecified impact and attack vectors.
Weakness: CWE-732
Which versions are affected by CVE-2013-0885?
It affects 2 products.
Products include Google Chrome, Opensuse Opensuse.
How do I fix CVE-2013-0885?
Upgrade to a fixed version.
Is CVE-2013-0885 being exploited?
There is no known exploitation of CVE-2013-0885 in the wild and no public exploit code.
Other vulnerabilities in Google Chrome
Sources
Also known as GHSA-jg6q-rjpx-vg7v.