Vladimir Metnew

A semi-privileged extension can launch an arbitrary application on the user's computer by downloading a file with the .fileloc extension. However, the attacker's ability to exploit this issue is limited as they cannot download non-quarantined files or supply command line arguments to the application. This issue only affects Mac OSX, with other operating systems being unaffected.

The issue is related to insufficient policy enforcement in downloads and insufficient input validation. This could allow a remote attacker to gain unauthorized access to information, compromise its integrity and availability, and execute arbitrary code via a crafted Chrome Extension if a user is convinced to install a malicious extension.

The issue is related to incorrect handling of history on iOS in Navigation, allowing a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. This is due to insufficient input validation, which can be exploited by a remote attacker to manipulate the Omnibox component.