Description
Google Chrome before 4.1.249.1059 does not prevent pages from loading with the New Tab page's privileges, which has unknown impact and attack vectors.
References
- 63997 vdb-entry
- 39603 vdb-entry
- 39544 third-party-advisory
- http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html
- oval:org.mitre.oval:def:11866 vdb-entry signature
- http://bugs.chromium.org/40575