CVE-2013-2868

Publication date 10 July 2013

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

common/extensions/sync_helper.cc in Google Chrome before 28.0.1500.71 proceeds with sync operations for NPAPI extensions without checking for a certain plugin permission setting, which might allow remote attackers to trigger unwanted extension changes via unspecified vectors.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
chromium-browser 13.04 raring
Fixed 28.0.1500.71-0ubuntu1.13.04.1
12.10 quantal
Fixed 28.0.1500.71-0ubuntu1.12.10.1
12.04 LTS precise
Fixed 28.0.1500.71-0ubuntu1.12.04.1
10.04 LTS lucid Ignored end of life