CVE-2013-2876 Information disclosure in n/a

Medium 5.0 Published Updated

Remote attackers can obtain sensitive information about previous page content via Chrome extension screenshot restrictions bypass.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
A user has to click or open something
Fix
Available

What is CVE-2013-2876?

CVE-2013-2876 is a medium-severity vulnerability in Debian Debian Linux, published on 10 Jul 2013. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

browser/extensions/api/tabs/tabs_api.cc in Google Chrome before 28.0.1500.71 does not properly enforce restrictions on the capture of screenshots by extensions, which allows remote attackers to obtain sensitive information about the content of a previous page via vectors involving an interstitial page.

Weakness: CWE-264

Which versions are affected by CVE-2013-2876?

It affects 2 products.

Products include Debian Debian Linux, Google Chrome.

How do I fix CVE-2013-2876?

Upgrade to a fixed version.

Is CVE-2013-2876 being exploited?

There is no known exploitation of CVE-2013-2876 in the wild and no public exploit code.

All Debian Debian Linux vulnerabilities

Sources

Also known as GHSA-93x9-vchg-cxph.

Is CVE-2013-2876 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free