Описание
Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly enforce a user gesture requirement before proceeding with a file download, which might make it easier for remote attackers to execute arbitrary code via a crafted file.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 25.0.1364.160-0ubuntu1 |
| hardy | DNE | |
| lucid | released | 25.0.1364.160-0ubuntu0.10.04.1 |
| oneiric | released | 25.0.1364.160-0ubuntu0.11.10.1 |
| precise | released | 25.0.1364.160-0ubuntu0.12.04.1 |
| quantal | released | 25.0.1364.160-0ubuntu0.12.10.1 |
| upstream | released | 25.0.1364.97 |
Показывать по
EPSS
6.8 Medium
CVSS2
Связанные уязвимости
Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly enforce a user gesture requirement before proceeding with a file download, which might make it easier for remote attackers to execute arbitrary code via a crafted file.
Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25. ...
Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly enforce a user gesture requirement before proceeding with a file download, which might make it easier for remote attackers to execute arbitrary code via a crafted file.
EPSS
6.8 Medium
CVSS2