This template is ONLY for reporting security bugs. If you are reporting a
Download Protection Bypass bug, please use the "Security - Download
Protection" template. For all other reports, please use a different
template.

Please READ THIS FAQ before filing a bug: https://www.chromium.org/Home
/chromium-security/security-faq

Please see the following link for instructions on filing security bugs:
http://www.chromium.org/Home/chromium-security/reporting-security-bugs

NOTE: Security bugs are normally made public once a fix has been widely
deployed.

VULNERABILITY DETAILS
Please provide a brief explanation of the security issue.This is an exploit within the Chrome App Store

Chrome Version: [x.x.x.x] + [stable, beta, or dev]Version 57.0.2987.133 (64-bit)+ Stable
 
Operating System: [Please indicate OS, version, and service pack level]Windows 7

REPRODUCTION CASE
Please include a demonstration of the security bug, such as an attached
HTML or binary file that reproduces the bug when loaded in Chrome. PLEASE
make the file as small as possible and remove any content not required to
demonstrate the bug. 
/* JS */ gapi.loaded_0(function(_){var window=this;
var aa,vf,Na,Pa,jb,ib,Fb,Mb,bc,wc,ia,la;
for(_.k,_.b=function(a){return function(){return
aa[a].apply(this,arguments)}},_.d=function(a,c){return
aa[a]=c},_._DumpException=function(a){throw
a;},aa=[],vf="function"==typeof
Object.defineProperties?Object.defineProperty:function(a,c,f)

FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
Type of crash: [tab, browser, etc.] chrome app store Hack
Crash State: [see link above: stack trace, registers, exception record] destroys my computer, corrupts everything, enables remote access

client ID (if relevant): [see link above] Not relevant



 

Deleted: chrome app crash.txt.docx 641 KB

chrome app crash.txt.docx 641 KB Download