Google Chrome contains a weakness in the extension support as installed extensions have full permissions to access and modify all chrome:// pages and options. With a malicious extension, a context-dependent attacker can break out of the sandbox.
Classification
Location:
Context Dependent
Attack Type:
Other
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Public
Disclosure:
Vendor Verified,
Coordinated Disclosure
OSVDB:
Vuln Dependent,
Web Related
Solution
Upgrade to version 12.0.742.91 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
