SecuritySpace - CVE-2013-6666

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2013-6666

Description: The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper_flash_renderer_host.cc in Google Chrome before 33.0.1750.146 does not verify that all headers are Cross-Origin Resource Sharing (CORS) simple headers before proceeding with a PPB_Flash.Navigate operation, which might allow remote attackers to bypass intended CORS restrictions via an inappropriate header.

Test IDs: 1.3.6.1.4.1.25623.1.0.702883

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-6666
BugTraq ID: 65930
http://www.securityfocus.com/bid/65930
Debian Security Information: DSA-2883 (Google Search)
http://www.debian.org/security/2014/dsa-2883

CVE ID:	CVE-2013-6666
Description:	The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper_flash_renderer_host.cc in Google Chrome before 33.0.1750.146 does not verify that all headers are Cross-Origin Resource Sharing (CORS) simple headers before proceeding with a PPB_Flash.Navigate operation, which might allow remote attackers to bypass intended CORS restrictions via an inappropriate header.
Test IDs:	1.3.6.1.4.1.25623.1.0.702883
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6666 BugTraq ID: 65930 http://www.securityfocus.com/bid/65930 Debian Security Information: DSA-2883 (Google Search) http://www.debian.org/security/2014/dsa-2883