Improper Enforcement of Screenshot Restrictions in Google Chrome Extension API

CVE-2013-2876 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

browser/extensions/api/tabs/tabs_api.cc in Google Chrome before 28.0.1500.71 does not properly enforce restrictions on the capture of screenshots by extensions, which allows remote attackers to obtain sensitive information about the content of a previous page via vectors involving an interstitial page.

Learn more about our Cis Benchmark Audit For Google Chrome.