Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the extension bindings in Google Chrome before 51.0.2704.63 mishandles properties, which allows remote attackers to conduct bindings-interception attacks and bypass the Same Origin Policy via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Google Chrome 安全漏洞
Vulnerability Description
Google Chrome 51.0.2704.63之前的版本的扩展绑定中的extensions/renderer/module_system.cc文件的‘ModuleSystem::RequireForJsInner’函数存在安全漏洞,该漏洞源于程序没有正确处理属性项。远程攻击者可利用该漏洞实施bindings-interception攻击,绕过同源策略。
CVSS Information
N/A
Vulnerability Type
N/A