CVE-2013-6666

EPSS 1.18%
Veröffentlicht 05.03.2014 05:11:22
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper_flash_renderer_host.cc in Google Chrome before 33.0.1750.146 does not verify that all headers are Cross-Origin Resource Sharing (CORS) simple headers before proceeding with a PPB_Flash.Navigate operation, which might allow remote attackers to bypass intended CORS restrictions via an inappropriate header.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 106 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Chrome Version <= 33.0.1750.144

Google ≫ Chrome Version 33.0.1750.0

Google ≫ Chrome Version 33.0.1750.1

Google ≫ Chrome Version 33.0.1750.2

Google ≫ Chrome Version 33.0.1750.3

Google ≫ Chrome Version 33.0.1750.4

Google ≫ Chrome Version 33.0.1750.5

Google ≫ Chrome Version 33.0.1750.6

Google ≫ Chrome Version 33.0.1750.7

Google ≫ Chrome Version 33.0.1750.8

Google ≫ Chrome Version 33.0.1750.9

Google ≫ Chrome Version 33.0.1750.10

Google ≫ Chrome Version 33.0.1750.11

Google ≫ Chrome Version 33.0.1750.12

Google ≫ Chrome Version 33.0.1750.13

Google ≫ Chrome Version 33.0.1750.14

Google ≫ Chrome Version 33.0.1750.15

Google ≫ Chrome Version 33.0.1750.16

Google ≫ Chrome Version 33.0.1750.18

Google ≫ Chrome Version 33.0.1750.19

Google ≫ Chrome Version 33.0.1750.20

Google ≫ Chrome Version 33.0.1750.21

Google ≫ Chrome Version 33.0.1750.22

Google ≫ Chrome Version 33.0.1750.23

Google ≫ Chrome Version 33.0.1750.24

Google ≫ Chrome Version 33.0.1750.25

Google ≫ Chrome Version 33.0.1750.26

Google ≫ Chrome Version 33.0.1750.27

Google ≫ Chrome Version 33.0.1750.28

Google ≫ Chrome Version 33.0.1750.29

Google ≫ Chrome Version 33.0.1750.30

Google ≫ Chrome Version 33.0.1750.31

Google ≫ Chrome Version 33.0.1750.34

Google ≫ Chrome Version 33.0.1750.35

Google ≫ Chrome Version 33.0.1750.36

Google ≫ Chrome Version 33.0.1750.37

Google ≫ Chrome Version 33.0.1750.38

Google ≫ Chrome Version 33.0.1750.39

Google ≫ Chrome Version 33.0.1750.40

Google ≫ Chrome Version 33.0.1750.41

Google ≫ Chrome Version 33.0.1750.42

Google ≫ Chrome Version 33.0.1750.43

Google ≫ Chrome Version 33.0.1750.44

Google ≫ Chrome Version 33.0.1750.45

Google ≫ Chrome Version 33.0.1750.46

Google ≫ Chrome Version 33.0.1750.47

Google ≫ Chrome Version 33.0.1750.48

Google ≫ Chrome Version 33.0.1750.49

Google ≫ Chrome Version 33.0.1750.50

Google ≫ Chrome Version 33.0.1750.51

Google ≫ Chrome Version 33.0.1750.52

Google ≫ Chrome Version 33.0.1750.53

Google ≫ Chrome Version 33.0.1750.54

Google ≫ Chrome Version 33.0.1750.55

Google ≫ Chrome Version 33.0.1750.56

Google ≫ Chrome Version 33.0.1750.57

Google ≫ Chrome Version 33.0.1750.58

Google ≫ Chrome Version 33.0.1750.59

Google ≫ Chrome Version 33.0.1750.60

Google ≫ Chrome Version 33.0.1750.61

Google ≫ Chrome Version 33.0.1750.62

Google ≫ Chrome Version 33.0.1750.63

Google ≫ Chrome Version 33.0.1750.64

Google ≫ Chrome Version 33.0.1750.65

Google ≫ Chrome Version 33.0.1750.66

Google ≫ Chrome Version 33.0.1750.67

Google ≫ Chrome Version 33.0.1750.68

Google ≫ Chrome Version 33.0.1750.69

Google ≫ Chrome Version 33.0.1750.70

Google ≫ Chrome Version 33.0.1750.71

Google ≫ Chrome Version 33.0.1750.73

Google ≫ Chrome Version 33.0.1750.74

Google ≫ Chrome Version 33.0.1750.75

Google ≫ Chrome Version 33.0.1750.76

Google ≫ Chrome Version 33.0.1750.77

Google ≫ Chrome Version 33.0.1750.79

Google ≫ Chrome Version 33.0.1750.80

Google ≫ Chrome Version 33.0.1750.81

Google ≫ Chrome Version 33.0.1750.82

Google ≫ Chrome Version 33.0.1750.83

Google ≫ Chrome Version 33.0.1750.85

Google ≫ Chrome Version 33.0.1750.88

Google ≫ Chrome Version 33.0.1750.89

Google ≫ Chrome Version 33.0.1750.90

Google ≫ Chrome Version 33.0.1750.91

Google ≫ Chrome Version 33.0.1750.92

Google ≫ Chrome Version 33.0.1750.93

Google ≫ Chrome Version 33.0.1750.104

Google ≫ Chrome Version 33.0.1750.106

Google ≫ Chrome Version 33.0.1750.107

Google ≫ Chrome Version 33.0.1750.108

Google ≫ Chrome Version 33.0.1750.109

Google ≫ Chrome Version 33.0.1750.110

Google ≫ Chrome Version 33.0.1750.111

Google ≫ Chrome Version 33.0.1750.112

Google ≫ Chrome Version 33.0.1750.113

Google ≫ Chrome Version 33.0.1750.115

Google ≫ Chrome Version 33.0.1750.116

Google ≫ Chrome Version 33.0.1750.117

Google ≫ Chrome Version 33.0.1750.124

Google ≫ Chrome Version 33.0.1750.125

Google ≫ Chrome Version 33.0.1750.126

Google ≫ Chrome Version 33.0.1750.132

Google ≫ Chrome Version 33.0.1750.133

Google ≫ Chrome Version 33.0.1750.135

Google ≫ Chrome Version 33.0.1750.136

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.18%	0.636

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.debian.org/security/2014/dsa-2883

http://googlechromereleases.blogspot.com/2014/03/stable-channel-update.html

Vendor Advisory

http://www.securityfocus.com/bid/65930

https://code.google.com/p/chromium/issues/detail?id=332023

https://src.chromium.org/viewvc/chrome?revision=249114&view=revision

https://nvd.nist.gov/vuln/detail/CVE-2013-6666

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-6666

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-6666

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2013-6666