CVE ID:	CVE-2011-3055
Description:	The browser native UI in Google Chrome before 17.0.963.83 does not require user confirmation before an unpacked extension installation, which allows user-assisted remote attackers to have an unspecified impact via a crafted extension.
Test IDs:	1.3.6.1.4.1.25623.1.0.71292
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3055 BugTraq ID: 52674 http://www.securityfocus.com/bid/52674 http://security.gentoo.org/glsa/glsa-201203-19.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15033 http://www.securitytracker.com/id?1026841 http://secunia.com/advisories/48512 http://secunia.com/advisories/48527 SuSE Security Announcement: openSUSE-SU-2012:0466 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00000.html XForce ISS Database: google-nativeui-weak-security(74215) https://exchange.xforce.ibmcloud.com/vulnerabilities/74215