CVE:CVE-2018-17477
CNNVD:CNNVD-201810-780
Google Chrome是美国谷歌（Google）公司的一款Web浏览器。Extensions是其中的一个浏览器功能扩展插件。
Google Chrome 70.0.3538.67之前版本中的Extensions存在输入验证错误漏洞。远程攻击者可借助特制的HTML页面利用该漏洞伪造扩展弹出窗口的内容。
solution:Upgrade google chrome to a higher version than 70.0.3538.67,and avoid the version (,70.0.3538.67); Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0