ByteOS Network

Vulnerability Details :

CVE-2019-13755

Assigner-Chrome

Assigner Org ID-ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28

Published At-10 Dec, 2019 | 21:01

Updated At-05 Aug, 2024 | 00:05

Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to disable extensions via a crafted HTML page.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:Chrome

Assigner Org ID:ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28

Published At:10 Dec, 2019 | 21:01

Updated At:05 Aug, 2024 | 00:05

▼CVE Numbering Authority (CNA)

Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to disable extensions via a crafted HTML page.

Affected Products

Vendor

Google LLC

Product

Chrome

Versions

Affected

From unspecified before 79.0.3945.79 (custom)

Problem Types

Type	CWE ID	Description
text	N/A	Insufficient policy enforcement

Type: text

CWE ID: N/A

Description: Insufficient policy enforcement

References

Hyperlink	Resource
https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html	x_refsource_MISC
https://crbug.com/696208	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2019:4238	vendor-advisory x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html	vendor-advisory x_refsource_SUSE
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2Z5M4FPUMDNX2LDPHJKN5ZV5GIS2AKNU/	vendor-advisory x_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html	vendor-advisory x_refsource_SUSE
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/	vendor-advisory x_refsource_FEDORA
https://seclists.org/bugtraq/2020/Jan/27	mailing-list x_refsource_BUGTRAQ
https://www.debian.org/security/2020/dsa-4606	vendor-advisory x_refsource_DEBIAN
https://security.gentoo.org/glsa/202003-08	vendor-advisory x_refsource_GENTOO

Hyperlink: https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html

Resource:

x_refsource_MISC

Hyperlink: https://crbug.com/696208

Resource:

x_refsource_MISC

Hyperlink: https://access.redhat.com/errata/RHSA-2019:4238

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2Z5M4FPUMDNX2LDPHJKN5ZV5GIS2AKNU/

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: https://seclists.org/bugtraq/2020/Jan/27

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: https://www.debian.org/security/2020/dsa-4606

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://security.gentoo.org/glsa/202003-08

Resource:

vendor-advisory

x_refsource_GENTOO

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html	x_refsource_MISC x_transferred
https://crbug.com/696208	x_refsource_MISC x_transferred
https://access.redhat.com/errata/RHSA-2019:4238	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html	vendor-advisory x_refsource_SUSE x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2Z5M4FPUMDNX2LDPHJKN5ZV5GIS2AKNU/	vendor-advisory x_refsource_FEDORA x_transferred
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html	vendor-advisory x_refsource_SUSE x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/	vendor-advisory x_refsource_FEDORA x_transferred
https://seclists.org/bugtraq/2020/Jan/27	mailing-list x_refsource_BUGTRAQ x_transferred
https://www.debian.org/security/2020/dsa-4606	vendor-advisory x_refsource_DEBIAN x_transferred
https://security.gentoo.org/glsa/202003-08	vendor-advisory x_refsource_GENTOO x_transferred

Hyperlink: https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://crbug.com/696208

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:4238

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2Z5M4FPUMDNX2LDPHJKN5ZV5GIS2AKNU/

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: https://seclists.org/bugtraq/2020/Jan/27

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: https://www.debian.org/security/2020/dsa-4606

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: https://security.gentoo.org/glsa/202003-08

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:chrome-cve-admin@google.com

Published At:10 Dec, 2019 | 22:15

Updated At:07 Nov, 2023 | 03:04

Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to disable extensions via a crafted HTML page.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

Type: Primary

Version: 3.1

Base score: 4.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

Google LLC

>>chrome>>Versions before 79.0.3945.79(exclusive)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>9.0

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>10.0

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Fedora Project

>>fedora>>30

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

Fedora Project

>>fedora>>31

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_desktop>>6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:x64:*

Red Hat, Inc.

>>enterprise_linux_desktop>>6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:x86:*

Red Hat, Inc.

>>enterprise_linux_for_scientific_computing>>6.0

cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:x64:*

Red Hat, Inc.

>>enterprise_linux_for_scientific_computing>>6.0

cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:x86:*

Red Hat, Inc.

>>enterprise_linux_server>>6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:x64:*

Red Hat, Inc.

>>enterprise_linux_server>>6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:x86:*

Red Hat, Inc.

>>enterprise_linux_workstation>>6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:x64:*

Red Hat, Inc.

>>enterprise_linux_workstation>>6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:x86:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov