Vulnerability identifier: #VU7957
Vulnerability risk: Critical
Exploitation vector: Network
Exploit availability: No
Vendor: a9t9 software GmbH
The vulnerability allows a remote attacker to gain unauthorized access to victim's browser.
The vulnerability exists due to presence of backdoor code in Copyfish Google Chrome extension 2.8.5, distributed via Google Web Store.
Update to version 2.8.6 or later.
Vulnerable software versions
Copyfish (Chrome extension): 2.8.5
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?