Description
The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, which has unspecified impact and attack vectors.
References
- https://support.apple.com/HT205265
- 1033688 vdb-entry
- APPLE-SA-2015-09-30-2 vendor-advisory